Documentation Comments

Use this form to comment on this topic. You can also provide any general observations about the Online Documentation, or request that additional information be added in a future release.

Reality V15.0 ()

SYS Security Files (Host) (syssecurityfiles.htm)

To	Reality
Version
Topic
Submitted by
Company
Location
Email address
Comment

SYS Security Files

The following security files are required by the host command prompt (shell) security software.

sys.needed Lists host commands that are essential for running Reality.

Caution

sys.needed must not be modified by users; if it is, the Reality utilities will not function correctly.

sys.user Lists host commands that the user wishes to explicitly permit.

sys.profileLists host commands that may be run by any user with the relevant security profile.

The sys.user and sys.profile files (one for each security profile) are set up by the system/database administrator in either the directory REALDBPATH/configs or REALROOT/files. Reality looks for the security files in the database configs directory first, and then, if not found, in REALROOT/files.

The syntax of the shell command list is simple. For example, the sys.needed file, supplied with your system, contains the list:

lpstat -v
lpstat -t
lpstat -o
pdump -c $REALDBPATH
pdump -p $REALDBPATH
pdump -% $REALDBPATH
realfsadm ...
echo ...
REAL= reality -c ...
etc.

A host command being run from Reality by a user with Shell Security Levels 0 or 1 must match a line in a security file. If the line ends in an ellipsis (...), the command need only match up to the ellipsis. Without the ellipsis, the command must match exactly.