skip book previous and next navigation links
go up to top of book: HP OpenVMS Guide to System SecurityHP OpenVMS Guide to System Security
go to beginning of part: Security for the System AdministratorSecurity for the System Administrator
go to beginning of appendix: Assigning PrivilegesAssigning Privileges
go to previous page: PFNMAP Privilege (All)PFNMAP Privilege (All)
go to next page: PRMCEB Privilege (Devour)PRMCEB Privilege (Devour)
end of book navigation links

PHY_IO Privilege (All)  



The PHY_IO privilege lets the user's process execute the QueueI/O Request ($QIO) system service to perform physical-level I/Ooperations.

Usually, process I/O requests are handled indirectly by useof an I/O package such as OpenVMS Record Management Services (RMS).However, to increase their control over I/O operations and to improvethe efficiency of their applications, skilled users sometimes preferto handle directly the interface between their process and a systemI/O driver program. They can do this by executing the $QIO systemservice; in many instances, the operation called for is a physical-levelI/O operation.

Grant the PHY_IO privilege only to users who need it; grantthis privilege even more carefully than the LOG_IO privilege. Ifthis privilege is given to unqualified users who have no need forit, the operating system and service to other users can be easilydisrupted. Such disruptions can include the destruction of information onthe system device, the destruction of user data, and the exposureof confidential information.

The PHY_IO privilege also lets a process perform the followingtasks:

Task Interface
Access an individualshadow-set member unit
$ASSIGN, $QIO
Create or deletea watchpoint
$QIO request to the SMPwatchpoint driver (WPDRIVER)
Map an LTAdevice to a server/port (IO$_TTY_PORT!IO$M_LT_MAPPORT)
$QIO request to a LAT portdriver (LTDRIVER)
Issue the followingI/O requests:
  • Logical I/O request


  • Logical or virtual I/O request with IO$M_MSCPMODIFSmodifier


  • Physical I/O to private, non-file-structured device

$QIO
Modify thefollowing terminal attributes: HANGUP SET_SPEED SECURE_SERVER
SET TERMINAL or the terminaldriver (TTDRIVER) /[NO]HANGUP /[NO]SET_SPEED /[NO]SECURE_SERVER
Issue IO$_ACCESS(diagnostic) function to DEBNA/NI device driver
$QIO request to a synchronouscommunications line (XGDRIVER)
Enable Ethernetpromiscuous mode listening

Issue IO$_ACCESS (diagnostic)function to Ethernet common driver



go to previous page: PFNMAP Privilege (All)PFNMAP Privilege (All)
go to next page: PRMCEB Privilege (Devour)PRMCEB Privilege (Devour)