Setting Security Protection Characteristics on Devices

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP OpenVMS System Manager's Manual, Volume 1:...

Managing Peripheral Devices

Getting Information About Devices on the System

Connecting Devices and Loading Device Drivers

Setting Security Protection Characteristics on Devices

You can set security protection characteristics on devices using the following DCL commands:

INITIALIZE

MOUNT

SET SECURITY/PROTECTION

SET VOLUME

For more information about these commands, refer to the HP OpenVMS DCL Dictionary .

By default, allocating a tape or disk device requires VOLPRO privilege. However, you can grant access to unprivileged users in two ways:

Set device protection to grant control access to group or world, as appropriate.

Add an ACL to the device and grant a general identifier to all users who should have access.

Assisting Users in Accessing and Initializing Volumes has more information about the VOLPRO privilege.

Granting Access to a Specific Device

To grant access to a specific device, use the SET SECURITY command as shown in either of the following examples:

$ SET SECURITY/CLASS=DEVICE DKA300/PROT=W:RWC

This example grants world read, write, and control access for the device DKA300.

$ SET SECURITY/CLASS=DEVICE DKA300/ACL=(IDENTIFIER=CHEKOV, ACCESS=CONTROL)

This example grants control access for the device DKA300 to users with the CHEKOV identifier.

Granting Access to All Devices

Use the following method to grant a specified class of users access to all devices:

Set the security template for a particular device type to allow access to a desired class of users. Use a command such as the following one, which sets the template for disk devices:
```
$ SET SECURITY/CLASS=SECURITY_CLASS/PROFILE=TEMPLATE=DISK - 
_$ DEVICE/ACL=(ID=CHEKOV, ACCESS=R+W+D+C)
```
This access will apply to all specified devices initialized in the future.

Run the following command procedure:
```
$ @SYS$EXAMPLES:RESET_DEVICE_PROTECTION.COM
```
This command procedure applies the protection specified in the security template to all current devices.

Getting Information About Devices on the System

Connecting Devices and Loading Device Drivers