Protecting the Database Data Files

Supplying a Guard File Title

You can specify guard file titles in either or both of the following ways:

  • As a database physical option

  • As a structure physical option

In an Enterprise Database Server database, you can attach a guard file to data sets, sets, and subsets.

Example 1

The following DASDL statement secures all data files in an Enterprise Database Server database with a guard file titled (DBA)SECURE/DATAFILES ON P:

DEFAULTS (SECURITYGUARD = (DBA)SECURE/DATAFILES ON P);

Example 2

The following DASDL statement secures the data set DEPARTMENT with a guard file titled (DBA)SECURE/DEPARTMENT/DATA/SET ON P:

DEPARTMENT STANDARD DATA SET (
      NAME      ALPHA(10);
      ID-NUMBER NUMBER(4);
                             ),
      SECURITYGUARD = (DBA)SECURE/DEPARTMENT/DATA/SET ON P;

Guard File Contents

The contents of a guard file for a data file should specify read and write access for the DBA and for the following utilities and libraries:

  • SYSTEM/DMRECOVERY

  • SYSTEM/DMDATARECOVERY

  • SYSTEM/DMUTILITY

  • SYSTEM/DBCERTIFICATION

  • RECONSTRUCT/<database name>

  • DMSUPPORT/<database name>

  • RMSUPPORT/<database name>