config security

config security


config (R83) Index Level config tape
Syntax config security {vmname}
Category TCL
Type Menu
Description enters the Update processor to show the 'user' and 'groups' definition of the virtual machine:  "Unix User name"
This optional field contains the name of a valid Unix user, called the 'owner' of the virtual machine. It is strongly recommended to not leave this field empty, otherwise all users connected to the virtual machine effectively have root access to all the resources of the Unix system, which is a security risk. When the user is defined, it becomes the 'owner' of the virtual machine. All users allowed to be connected to the virtual machine become this user, as far as Unix is concerned. The Unix administrator should give proper authority to this special user so that all Pick users can use the required Unix resources (communications, access to Unix files, etc...).

"Authorized Unix groups"

This optional field contains the list of the Unix group(s) to which a Unix user must belong to be granted access to the virtual machine. To enter more than one group, type <ctrl>+v at the end of each entry to open a new line. If the group list is empty, then all users have access to the virtual machine.
Options
See Also config
Example Unix user name            pick
Authorized Unix groups    

All users are allowed to get to the virtual machine, and they all become the user 'pick'.

Unix user name            pick
Authorized Unix groups    staff
                       development

Only the users belonging to one of the groups 'staff' or  'development' are allowed to connect to the virtual machine, and they all become the user 'pick'.

Unix user name            
Authorized Unix groups    system

Only the users belonging to the group 'system' are allowed to connect to the virtual machine, and they all become 'root'.
Warnings The fact that a Unix user is the 'owner' of the virtual machine does not give him or her automatic access to the virtual machine if the group list is not empty. If the group list is not empty, it is advised, though not necessary, to add also the group to which the owner of the virtual machine belongs.
Compatibility AP 6.0
config (R83) Index Level config tape