SYS Security Files

The following security files are required by the host command prompt (shell) security software.

sys.needed Lists host commands that are essential for running Reality.

sys.user Lists host commands that the user wishes to explicitly permit.

sys.profileLists host commands that may be run by any user with the relevant security profile.

The sys.user and sys.profile files (one for each security profile) are set up by the system/database administrator in either the directory REALDBPATH To use an environment variable: On UNIX, $variableName; On Windows, %variableName%. /configs or REALROOT To use an environment variable: On UNIX, $variableName; On Windows, %variableName%. /files. Reality looks for the security files in the database configs directory first, and then, if not found, in REALROOT To use an environment variable: On UNIX, $variableName; On Windows, %variableName%. /files.

The syntax of the shell command list is simple. For example, the sys.needed file, supplied with your system, contains the list:

lpstat -v
lpstat -t
lpstat -o
pdump -c $REALDBPATH
pdump -p $REALDBPATH
pdump -% $REALDBPATH
realfsadm ...
echo ...
REAL= reality -c ...
etc.

A host command being run from Reality by a user with Shell Security Levels 0 or 1 must match a line in a security file.  If the line ends in an ellipsis (...), the command need only match up to the ellipsis. Without the ellipsis, the command must match exactly.