Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!mnetor!uunet!husc6!uwvax!rutgers!ames!ucbcad!ucbvax!ornl-ncc!pung From: pung@ornl-ncc ("M. S. Pung") Newsgroups: comp.os.vms Subject: Authorization ACL's Message-ID: <8711160549.AA10112@ucbvax.Berkeley.EDU> Date: Fri, 13-Nov-87 12:36:00 EST Article-I.D.: ucbvax.8711160549.AA10112 Posted: Fri Nov 13 12:36:00 1987 Date-Received: Tue, 17-Nov-87 03:28:40 EST Sender: daemon@ucbvax.BERKELEY.EDU Reply-To: "M. S. Pung" Organization: The ARPA Internet Lines: 124 Hi, I have been working with the ACL system services in an attempt to determine if a given system has AUDIT/ALARMS set on the AUTHORIZE file (Sysuaf.dat). This information is easily obtained in DCL by a $SHOW AUDIT command. Is there any way to get this information via a system service. In particular, I have tried the "Sys$check_access" system service but have not had any luck. If I specify the following: object type = "FILE" object name = "SYS$SYSTEM:SYSUAF.DAT" username = "SYSTEM" item code 1 = CHP$_ALARMNAME item code 2 = CHP$_AUDITNAME I correctly get a return status of SS$_NORMAL, however, the values returned in the RETLENADR field are 0 which according to the manual means that there are no audit/alarms set on the file. Note: Yes, I know positively that there are audits/alarms on the file. Am I missing something, or are the "AUTHORIZATION" alarms not really ACL's on the Sysuaf.dat file ? One other thing, the manual mentions "hidden" ACL's and some flags that you can set to specify these, but I do not see how they get integrated into the item list or the system service... Has anybody used system services to tell if "AUTHORIZATION" alarms and audits are enabled??? P.S. I noticed that the command $SHOW ACL SYS$SYSTEM:SYSUAF.DAT yields the same "SYSTEM-W-ACLEMPTY, access control list is empty" message. --------------------------------------------------------------------------- My test FORTRAN program is as follows: Program test Implicit none Include '($acldef)' ! get acl defs Include '($chpdef)' ! get chp defs Include '($psldef)' ! get psl defs Integer*4 Sys$check_access ! define sys srv Integer*2 dummy ! not needed Integer*4 fstat ! status Integer*4 alarm_set ! 0=no,?=yes Integer*4 audit_set ! 0=no,?=yes Character*64 alarm_buffer ! buffer to put Character*64 audit_buffer ! buffer to put Structure /chp_itmlst/ Union Map Integer*2 chp_buflen Integer*2 chp_itemcode Integer*4 chp_bufadr Integer*4 chp_retlenadr Endmap Map Integer*4 chp_endlist Endmap Endunion Endstructure Record /chp_itmlst/ chp_list(4) chp_list(1).chp_buflen = 64 chp_list(1).chp_itemcode = CHP$_ALARMNAME chp_list(1).chp_bufadr = %loc (alarm_buffer) chp_list(1).chp_retlenadr = %loc (alarm_set) chp_list(2).chp_buflen = 64 chp_list(2).chp_itemcode = CHP$_AUDITNAME chp_list(2).chp_bufadr = %loc (audit_buffer) chp_list(2).chp_retlenadr = %loc (audit_set) chp_list(3).chp_buflen = 1 chp_list(3).chp_itemcode = CHP$_ACMODE chp_list(3).chp_bufadr = %loc (psl$c_super) chp_list(3).chp_retlenadr = %loc (dummy) chp_list(4).chp_endlist = 0 fstat = Sys$check_access (acl$c_file, 'sys$system:sysuaf.dat', 1 'system', chp_list) Call lib$signal (%val (fstat)) type *,'Alarm set = ',alarm_set type *,'Audit set = ',audit_set type *,'Alarm buffer = ',alarm_buffer type *,'Audit buffer = ',audit_buffer end --------------------------------------------------------------------------- Any help would be appreciated, |------------------------------------------------------------------| | Mike Pung | (615) 574-8082 | | Oak Ridge National Lab | Pung%ornl-ncc@ornl-msr.arpa | | Martin Marietta Energy Systems | 192.12.68.201 | |------------------------------------------------------------------etc. H2JO