SECURITYGUARD Option

The SECURITYGUARD option sets the SECURITYGUARD file attribute to the name and location of the guard file that controls direct access to the database files by programs other than the Accessroutines. The use of guard files is not recommended for use with permanent directories. Standard system security rules prevail. The following conditions are some of the causes of security errors:

  • If a nonprivileged program that is run under a nonprivileged usercode attempts to directly access the database files and is not in the guard file

  • If the guard file is not present when the database file is accessed by a program that is nonprivileged and that runs under a nonprivileged usercode

Note: Use only DASDL constructs to set the SECURITYGUARD option for Enterprise Database Server structures. Setting the security type to GUARDED using an external method such as Command and Edit (CANDE) can cause unpredictable results. For a security file title change using DMCONTROL to take effect, the SECURITYGUARD option must be specified in DASDL.
Prev  Up  Next
SECTIONS Option  Home  STRENCRYPT Option