bound_security_tools_.bind 04/23/86 1032.7rew 04/23/86 1029.0 19377 /* HISTORY COMMENTS: 1) change(86-03-17,EJSharpe), approve(86-03-17,MCR7364), audit(86-03-21,Margolin), install(86-04-23,MR12.0-1045): Added set_process_audit_flags and companion entrypoints. END HISTORY COMMENTS */ /* BOUND_SECURITY_TOOLS_ - This segment holds routines that are used by the system security administrator to deal with the storage system and administrative access isolation attributes. Written by J. Whitmore 741218 Modified 750603 by PG to add administrative user control commands Modified 750819 by PG to delete set_term_class & print_term_info, now that CDT exists. Modified 1984-07-20 BIM to remove set_sat_*. We should flush this bound segment! Modified 1984-12-13 by EJ Sharpe - added convert_access_audit_flags_, merge_access_audit_flags_, and set_system_audit_flags. Also changed name of bound unit (old name was bound_ssa_commands_). */ Objectname: bound_security_tools_; Order: reclassify_dir, reset_soos, set_system_priv, set_system_audit_flags, convert_access_audit_flags_, merge_access_audit_flags_, set_process_audit_flags; Global: delete; Addname: reclassify_dir, reclassify_seg, reclassify_sys_seg, reset_soos, set_system_priv, set_system_audit_flags, display_system_audit_flags, convert_access_audit_flags_, merge_access_audit_flags_, set_process_audit_flags, edit_process_audit_flags, display_process_audit_flags; objectname: reclassify_dir; retain: reclassify_dir, reclassify_seg, reclassify_sys_seg; objectname: set_system_priv; retain: set_system_priv; objectname: reset_soos; retain: reset_soos; objectname: set_system_audit_flags; synonym: display_system_audit_flags; retain: set_system_audit_flags, display_system_audit_flags; objectname: convert_access_audit_flags_; retain: to_string, to_string_long, from_string, edit_from_string; objectname: merge_access_audit_flags_; retain: merge_access_audit_flags_; objectname: set_process_audit_flags; retain: set_process_audit_flags, edit_process_audit_flags, display_process_audit_flags; /* END */  convert_access_audit_flags_ 01/26/85 1324.5rew 01/22/85 1525.9 86400 admin_op priv_op fault small_cc moderate_cc Administrative_Operation Privileged_Operation ACV/IPR_Fault Small_Covert_Channel Moderate_Covert_Channel N MAM R No_Audit Modify_Access Modify Read fsobj fsattr rcp admin special other File_System_Object File_System_Attribute RCP_Object Administrative_Object Special_Object Other_Object ^va ^va ^va LTVV 4VVV TT^/^aT T TVTN#L$V?ObjectDeny LevelGrant LevelAudited Events:^[^14t^^^;^15t^]^aABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz:P&@PP^@"PP\@P`@Pb@I(@QP&@PP^@"PP\@P`@Pb@`PI@J(@\P@L@^PN@t`.@.@@>B@N~@hB@L(@NPL@t`.@.@@>C@N~L@C@=@@ER@B@C>@@\P@~@>P@t`z.@.@@>$PPJ@L@AJ@?R@L@P@H(@J(@H@8J@6RPP@t`V.@.@@>D@NPN@$PPJ@Z@D@P@X@H@~X@ZPT`@=.@.@>0H@ЁJ@΁X@>@J@bPI@`P@{dP&@PP`@P^@"P@P\@Pb@J(@`PI@K(@֝@*d@A@ A@dN@A,@e@@@ @@eN@r@,@\P@KN@@$P PJ@ ^PK@ `@`L$PPJ@J@bP@yP&@"PP@@P@P`@@Pb@J(@`PI@מ@T@PPV@֝@lT@E@Nu >@.@.@@@ ~@@>@T@T@V@ٞ@i@؝@ `@$ E@@@@@@el@VP@E@@F@@@@G@@@@G@@@@@@@@y@s@@ @n@k@h @@$$P P@ @C0f@A@ A@fN@EBA,@T@E@V@M@_@_@@@VP@E@@@@>@@@C@7@@$P P@g@@@@@gN@ Y@,@$PPJ@J@bPמ@T~@PP@$P PbP@PP(@"PP@@@VP@@i@P@P `p`g@h@X@ N$PPJ@jZP F@~ x(@~!@T @!@i@&@ `@`0@(@ @,@2@.@$@@2@@0P @@`n  @x@V @@&@0@(@ @,@2@.@$@@2@@0P @@`n  @w(@v@v@N"w@ &@0@(@,@ @.@$@@ @@0P `F@n  @w@v@O0@xIv,@w@$PPJ@h@z@X@(N$PPJ@z@ZPT`=.@.@>@NXN@~4@T3@4@i@:@ `@`D@<@3@@@5@B@8@O@5@@DP @@`( @(@@@N @H:@D@<@H@@3@B@8@1@3@@DP `F@( @@@@,@@$PPJ@@ZP@F@X@~@@V3@@:@P<@%>@3@@@8@@z@@@A@P@F@ N$PPJ@PPT`@/.@.@>$PPJ@F@T`@/.@.@H@TG@H@i@N@ `@`@X@P@G@T@I@V@L@@I@@XP @@`  @P@PF@T`/.@.@>I@F@I~@H@TG@H@i@N@I@ `@eJ@P@G@T@I@V@L@@I@@JP @@`  @ F@ 6<(@(@@N2@08@FN@J@P@T@G@V@L@@G@@JP `F@  @@P@P@F.@O0@.H@PN@N$PPJ@,@@$PPJ@ F@ =(@(@ @N2@08@FN@J@P@XT@G@V@L@B@G@@JP `F@  @@P@P@F.@O0@.H@PN@N$PPJ@,@@$PPJ@@@@PPP@EP@P@P@.P@@@I@Z@@P@0@@@0F.$.@\@FNP@0@@\@@0O.$.@FNP@0@@P@0@@@@K@ F`L|K@NK,@ F@xLP@0FH.$.@Fu8>@.@.@@_@_~@@0OH.$.@]@F_@u8>@.@.@@`@`~@`@PHa@u@>@.@.@@b@b~@b@a@K@b>@i@K@ `@`LK@b@ n@-Hb@>a@@b@ E@-a@`>@b@@a@_@`@ e@.8b@>a@@b@ E@a@]>@b@@a@]@ e@,8b@NK@ `@`L @@@@K@ F`LK@NK,@ F@LP6OIK@NK,@ F@LPc@u@ >@.@.@@d@ d~@d@c@K~@dN@d@K@K.@ m@.L@¨@F(@@Ȟ@NNe@u@ >@.@.@@f@ f~@E@FN@F@,@G(@(@ Ȟ@N:f@u@>@.@.@@g@g~@E@GN@G@,@ˆ@ʨ@̪@T@E@T@Vh@PP@0FH.$.@F@0OH.$.@Fn@VPp@E@r@F@t@Nv@G@x@: z@G@|@:~@@@h@@@@@@@@l@$$P P@ʈ@Ш@Ҫ@T@E@T@V@@@^a@P@0OI.$.@@@P@@VP@E@@@@@@@@@@@@$P P@qЈ@  !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~!V!T!E!@!A!!R!P!!N!L!/^^/=, convert_access_audit_flags_ symbol_table-  error_table_bad_argsmallarg ioa_rsnp#%' from_string:@* 'convert_access_audit_flags_$from_stringB-0 edit_from_stringQ:@= ,convert_access_audit_flags_$edit_from_stringWBE to_stringdQ@T %convert_access_audit_flags_$to_stringkWZ to_string_longyd@g *convert_access_audit_flags_$to_string_longkn lowercasey| %&&"&)symbtreeKMR#KʴFSCPL/I 6"' ,\kkkMultics PL/I Compiler, Release 28d, of October 4, 1983GJohnson.SysMaint.moptimize list:/[-KyF+[-K}4Q+[-K}>spec>temp>41-5>convert_access_audit_flags_.pl1>spec>temp>41-5>access_audit_flags.incl.pl1>spec>temp>41-5>access_audit_names.incl.pl1pl1info dconvert_access_audit_flags_spec>temp>41-5>merge_access_audit_flags_.pl1>spec>temp>41-5>access_audit_flags.incl.pl1pl1info Umerge_access_audit_flags_,!Zl_jZZk@obj_map [[t||k  reclassify_dir 01/26/85 1324.5rew 01/22/85 1526.0 27360 T?T> VLHV V-wdV#^a>^a-wdircleanupreclassify_segreclassify_dirlinkage_errorreclassify_sys_segThis command requires privileged access not given to this user. @G@H@{(@|(@}(@@zP%@ @@~{@P%@ @@~|@ P%@ @@~}@@@@@@@B@@F@@@$PP@F@F@@~@@@@@$P P@@PB@ F` F`B(@I@@s@@@@@B@@@@@@F@@@$PP@F@Ӂ x@ @P'@@_@ @P'@@H@@@$PP@G@@@$PP@|@=@I@@s@@@@F@@,@)@&@)@@$PP@@@@@@@B@@F@@@$PP@F@5$P NPy}@@I@@s@@@@F@@@@@@@P@}(@.I@@s@@D@@F@@@@@@@P@F@IB@V@D@@@P@F@@@@@@@ $P P@F@2{@I@@s@@D@@F@@@@@@@$PP@}@I@@s@@D@@F@@@@@@@$PP@F@# F@I @@I@F@@~@ª@@Ī@I@ƪ@s@Ȫ@ʪ@̪@vΪ@yЪ@vҪ@@$P P@G@F@@@$PP@H@F@@@$PP@@(@@@z@@@@~@ª@@Ī@Mƪ@SȪ@Hʪ@@ $P P@@reclassify_dir symbol_tablez cu_arg_ptrcom_err_convert_authorization_ from_string#&hcs_get_access_class)+0system_privilege_ dir_priv_on38; dir_priv_off3>B soos_priv_on3EI soos_priv_off3LPreclassify_branch3SXreclassify_node3[_reclassify_sys_seg3bg expand_path_jjn error_table_noargquw?`reclassify_segzL`}Y`blinkage_error.1 cleanup.2"&&&(&2&=&D&K&R&Z&a&i&p&ysymbtreeKMR#KʴzJ,PL/I 6"' ,;sGVipGGMultics PL/I Compiler, Release 28d, of October 4, 1983GJohnson.SysMaint.moptimize list2"[-Ky>spec>temp>41-5>reclassify_dir.pl1pl1info Creclassify_dir3 i<_ׁtx?}xWi<OӂtJPZjkʨ VkZ#_jZPZPZPVjZjk PXV@Zj@eU*eU*eU*eU*epobj_map V"^xs  reset_soos 02/16/88 1340.8re 02/16/88 1323.0 20808 T?TTV V-wdT #V-wdircleanupreset_sooslinkage_errorThis command requires privileged access not given to this user._P%@v@w@x@@@@@@@B@@C@@@P@C@ϟ@os@C@@@@@@@$P P@@@PB@ F` F`B(@B@V@@@D@@n@@C@@@@@@@@$P P@C@ B@V@@os@^a@C@@@@@@@P@@~@x@@@@$P P@@ {@z f@P'@@g@ l@P'@V@v@@@$PP@x@@@$PP@w@@@$PP@D@@n@@C@@;@4@6@@ $PP@C@,3@os@^a@D@@n@@@@"@@@@ $PP@C@@@@@@@@@ @@@@$P P@v@C@@@$PP@x@C@@@$PP@w@C@@@$PP@@(@@os@@@@@@@@@@@@@@@ $P P@@ reset_soos  symbol_table_ cu_arg_ptrcom_err_expand_pathname_! pathname_$$'system_privilege_check_mode_reset*/4 dir_priv_on*7: dir_priv_off*=A seg_priv_on*DG seg_priv_off*JN soos_priv_on*QU soos_priv_off*X\f &`linkage_error.1l_b cleanup.2ofi<&&&#&)&6&<&C&I&P&W&^symbtreeMx NJ΍rPL/I 3!& *<lGSbiGGMultics PL/I Compiler, Release 29, of July 28, 1986GJohnson.SysMaint.aoptimize map0/q80NJԀ>special_ldd>install>MR12.2-1022>reset_soos.pl1pl1info D reset_soosUUWF|_PS4}xSiPk ++Zk k@+VjZk +@eU*eU*eU*eTpobj_map <<pl6  set_process_audit_flags 04/23/86 1032.4re 04/23/86 1029.9 64008 sys_admin_data >udd>SysAdmin>admin @Enter audit flags string or "." to exit.^/ TTNTnoneallVT5TT-bf-lgT"V?TTTT)TV 4TT#VLL$VTTVcleanupdefault-brief-long?#Input was: ^a.enter flags: Could not open ^a.^/new flags: ^acurrent flags: ^aedit_process_audit_flagsset_process_audit_flagsUsage is: ^a {FLAGS_STR}Usage is: ^a {-long|-brief}display_process_audit_flagsUnexpected error getting arg.Process audit flags in error.Unexpected error getting argument.Internal error: converted flags in error.Internal error: Error occurred during error handling. @(@(@@@@@(@*@'@$@!@@@@ @ЗP%@ЗP%@J@@@$PP@@@@zP(@ЗP%@ЗP%@J@@@$PP@@@^@\P@ @@QϸN@@@$PP@ F@Q @Q@@N@@ @@ @"@$@@ @~N@@@$P$P@N@@Q@@O@@ @"@$@@ $PP@O@@@C  O@*@@,@0@2@(@@@@a@@*@Q@,@.@0@(@$PP@ @@Q@׭@׭@׭@@u2>@.@.@@ @2 ~@@ F@Qke@4@ȟ@ȟ@4@8@Q@:@@@<@@>@@@B@D@F@6@$P P@ F@QLހ @Q@@N@@ @@ @"@$@@ @N@@Q@@O@@} @y"@v$@@ $PP@O@@@,(,O@@(@@f @^"@@K@@@@*@Q@,@P.@V0@(@$PP@N@@@$P$P@@ЗP%@ЗP%@J@@@$PP@@@u(@YzN@@@$PP@ @@Qѝ@ (@N@8@Q@:@ @<@O@>@@@B@D@ F@6@$PP@N@@Q@@O@@ @"@$@@ $PP@O@@@G ( O@@(@@ @"@@@^a @ @*@Q@,@.@0@(@$PP@@@@@A@P@H@PP @@`@@ @L@O@N@J@$PP@O@ O@R@V@P@@@@(@Ҟ@@@@N@9@Z@L@\@H@^@O@`@J@b@X@$PP@O@@@$X$O@f@X@h@l@n@d@s@LPH@ F` F`s@  F` F`g(@,@@@@d$P(Pr@d@t@@@v@cz@R|@[~@p@ F@@@Ҟ@N*(@@@L@@H@@O@@J@@@$PP@O@@@ O@@@@9@6@@@LPH@ @@`Q@(@@@b@@@@@@@@@@@ @@ P'@B@  P'@B(@G@ȫ@@D@Ϊ@̑@$PP@@@Ҫ@@@Ԫ@C@֪@F@ت@D@ڪ@Б@$PP@F@@@Y88F@@ P@@@@@@@@@ $P P@@ʞ@V@@@@@D@@@@@@P@@@@@@ @ @@@@@@@@@$PP@ʞ@V@@P@ P@@@P@@@@@@ $P P@B@@@@@A@P@@PP F`@P@@s@o F`@aP@@@d F`@UP@@@YP@P@P@O@@PP@X@S@@ $PP@P@P@O@@PP@E@@@@ $PP@O@0PPH@H@O@ª@@Ī@Pƪ@)ʪ@̪@P@PΪ@@ @2@2@O@ª@@Ī@Pƪ@ʪ@̪@P@PΪ@@ @@ʀP'@ P@@B Ѐ@P'@.@W@@J@L@N@ P@P@@@R@O@T@V@X@Z@\@^@`@H@$P P@ PO@*H@J@a.L@r@h@b@@@@@@ $P"P@ PO@@H@@b@@@@@@ @ P@@PP.@@@ր`P'@ P PP@@@@0@ P P@B(@@@F@B@H@YJ@O@L@{N@cP@bR@xT@D@&P@@@@$@ @@P@@@(P@!(S!a!b. set_process_audit_flags symbol_table  access_audit_gate_get_process_audit_flagscom_err_!!$command_query_''+convert_access_audit_flags_ to_string.58to_string_long.;?edit_from_string.BG from_string.JMcu_ arg_countPQT arg_list_ptrPW[ arg_ptr_relP^aioa_ddf general_rsdilinitiate_file_oos pathname_vvysystem_privilege_|terminate_file_ error_table_bad_arg` spaf` epaf` edit_process_audit_flags` dpaf` display_process_audit_flags` FATAL_ERRORF WARNINGO GET_DEFAULT_FLAGSU cleanup.1d CLEAN_UP *& &&&-&:&A&I&O&V&]&c&h&n&u&{&&&symbtreeK˥1L0އPL/I 8"' *Multics PL/I Compiler, Release 28e, of February 14, 1985GJohnson.SysMaint.aoptimize mapDULS([^K5](\gqK-Lg$NIXp M{Io繀x$[^}K3>special_ldd>install>MR12.0-1045>set_process_audit_flags.pl1>ldd>include>access_audit_flags.incl.pl1>ldd>include>access_mode_values.incl.pl1>ldd>include>terminate_file.incl.pl1>ldd>include>query_info.incl.pl1>ldd>include>sys_admin_data.incl.pl1pl1info set_process_audit_flagsYU  ^<%Oӂt=xמ&h  Z @@$$@!H@ F`k F`DH(@V@V@$PP@@@4 @@ @@@h,@@@@A@P@@,@PP@P@P@@@(V@V@PP@XP@@ @"@@$@&@@ $PP@@V@V@@@XP@ @@"@@@+@@@A@P@(@@,@X@.@V@0@@2@T@4@*@$P&P@@@,@PP.@0@P@P2@*@@@@@A@P@6@PP:@L@<@P>@@@B@P@PD@8@ $PP@!!J!!F!!B! !! !!!!!! set_system_audit_flags symbol_table  error_table_bad_argnoargsys_infoaudit_covert_channel!$*covert_channel_threshold!-4audit_successful_access!7=successful_access_threshold!@Gaudit_unsuccessful_access!JQunsuccessful_access_threshold!T\hphcs_set_sys_audit_thresholds_ahcom_err_kknconvert_access_class_to_string_shortqw{ from_stringq~cu_ arg_count arg_count_rel arg_list_ptr arg_ptr_relioa_ssaf` ` dsaf` display_system_audit_flags` *&& &,&6&?&I&S&^&j&p&}&&&&&&symbtreeKMR#Kʴ+PL/I 6"' ,=KcxKKMultics PL/I Compiler, Release 28d, of October 4, 1983GJohnson.SysMaint.moptimize list2*[-Ky>spec>temp>41-5>set_system_audit_flags.pl1pl1info Eset_system_audit_flags 敀;j+APz<'Oӂ xO<OӍt]x,`@ @ _jZZjZ_k_k'_j_jPk@ VjAk +@eU*eU*eU*eU*eU*eTobj_map x*&  set_system_priv 01/26/85 1324.5rew 01/22/85 1526.3 29952 set_system_privT?T(VT^rcprcpsoos^segseg^dirdir^ipcipcTTV#^comm^ring1ring1^soos^communicationscommunicationslinkage_error^/Accessing argument ^d.Privilege already in state requested: ^aThis command requires privileged access not given to this user.^/Usage: set_system_priv privnames^/^7xwhere a privname can be: ipc, dir, seg, soos, ring1, rcp, or comm.^/^7xEach may be preceeded by "^" for negation.P%@E@R@C@T@P@ P@C@C@X@|Z@\@^@V@$PP@@E@@@`$P.P@h@`@@z@w@t@@ P@@ @H @P'@@E@N@F@F@NN@F@X@@@Z@B@\@C@^@V@$PP@C@`P@`R@`T@C@b@,d@P@f@F@h@<j@9l@5n@2p@`@$PP@@@PB@ F`' D@R@P@$PP@ F` D@R@P@$PP@ F`  D@R@P@$PP@ F` D@R@P@$PP@ F` D@R@P@$PP@ F` D@R@P@$PP@ F` D@R@P@$P P@z F` D@R@P@$P"P@n F` D@R@P@$PP@b F` D@R@P@$PP@V F` D@R@P@$P$P@J F` D@R@P@$P&P@> F` F` D@R@P@$P(P@. F` F` D@R@P@$P*P@D(@$P,PC@B@VO@^a@C@b@[d@@f@@h@kj@hl@Yn@O@p@`@P@D@B@VO@@@v(V(V@@@P@C@O@@@$P P@F,@@O(@@@l@`@O@@+@`@@,@:@'@@ $PP@@set_system_priv symbol_table cu_arg_ptr arg_countioa_com_err_""%system_privilege_ ipc_priv_on(-0 ipc_priv_off(37 dir_priv_on(:= dir_priv_off(@D seg_priv_on(GJ seg_priv_off(MQ ring1_priv_on(TXring1_priv_off([_ soos_priv_on(bf soos_priv_off(im rcp_priv_on(ps rcp_priv_off(vz comm_priv_on(} comm_priv_off( error_table_badoptnoargs`linkage_error.10&&&!&'&2&9&?&F&L&S&Z&a&h&o&u&|&&&&symbtreeKMR#KʴPL/I 6"' ,;yGXlvGGMultics PL/I Compiler, Release 28d, of October 4, 1983GJohnson.SysMaint.moptimize list2#[-Ky>spec>temp>41-5>set_system_priv.pl1pl1info Cset_system_priv%/iF|5OӁtx/ z^<OӁx/iPZjkʨ Vj@+@ Vjk@ Z+VjPk@ P+@eU*eU*eU*eU*eU*eU*eTpobj_map 0y4