Re: IFS: Is there a similar command to the library CHGLIB LIB(MYLIB) CRTAUT(MYAUTL)?

On Oct 30, 2017, at 5:37 PM, Buck Calabro <kc2hiz@xxxxxxxxx> wrote:

On 10/30/2017 10:47 AM, Rob Berendt wrote:

When you set up security on a library you can do
CHGLIB LIB(MYLIB) CRTAUT(MYAUTL)
So that all new objects created in that library have the authority in that
authorization list.

Is there some way to do this with an IFS directory?
Basically I want all new files, directories, subdirectories thereof, etc,
created in the '/SampleDirectory' to have the authority of authorization
list MYAUTL.

It took me a bit of digging to find The Fine Manual entry that covers
this scenario. For 7.3:
Security > Planning and setting up system security > Planning your
security strategy > Planning resource security > Planning integrated
file system security > Security for new objects, whew. The salient line
is this: 'When you create a new object in the root (/) file system, the
interface that you use to create it determines its authorities.'

The bigger picture is that the root file system tried very hard to be
true to the Unix-like security model, which has no clue about an
authorization list. So applications like 'touch' will inherit the
Unix-y parts of the authority model, but not the 'native' bits.

I note that contrary to this generality, the open() API will inherit the
authorization list. Here is a very hacked together RPG program that
will 'touch' a file and inherit the security from the parent directory:
https://code.midrange.com/fb71679356.html

--
--buck

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: http://amzn.to/2dEadiD