Any time that potentially hazardous files are loaded on the system, they should be loaded on a tape drive that is restricted with the RESTRICT (Set Restrictions) system command. This command can protect such files until their SECURITYTYPE and SECURITYUSE attributes are assigned appropriate values and, where needed, appropriate guard files are attached to the files.

To restrict a tape drive, enter the following command at an ODT:

RESTRICT MT <unit number>

In place of <unit number>, enter the unit number of the drive to be restricted. To obtain the unit numbers of the tape drives on your system, enter the following command at an ODT:

PER MT =

In the list this command displays, the numbers on the far left are the unit numbers of the system tape drives.

For more information about the RESTRICT command and restricted files, see “RESTRICT (Set Restrictions) Command” in Controlling File Access.