Trusted Solaris User's Guide

Allocate Device

Allocate Device is available to authorized users only. It lets you mount and allocate a device so that you can securely move data on or off the system to another medium. If you try to use a device without allocating it, you will get the error message "Permission Denied."

To Allocate a Device

  1. A) Select Allocate Device from the Trusted Path menu.

    This step causes the Device Allocation Manager to be displayed.

    OR

  1. B) Select Device Allocation Manager from the Tools subpanel in the Front Panel.

    This is an alternative step for displaying the Device Allocation Manager (see below).

    Figure 4-11 Device Allocation Manager

    Graphic

  2. Look in the available device list for the device you wish to use.

    The devices that you are permitted to allocate at your current label appear in this list. Table 4-1 shows some typical device names.

    Table 4-1 Device Name Abbreviations

    Abbreviated Device Name 

    Long Version of Device Name 

    audio 

    microphone and speakers 

    floppy_0 

    floppy drive 

    mag_tape_0 

    tape drive (streaming) 

    cdrom_0 

    CDROM drive 

    If the device you want to use does not appear in the list, you should check with your administrator to make sure you are properly authorized. It may also be that the device is in an error state or in use by somebody else.

  3. Move the device from the Available Devices list to the Allocated Devices list.

    You can accomplish this by:

    • Double-clicking the device name in the Available Devices list

    • Selecting the device and clicking the Allocate (right-pointing) button

    This step starts the clean script. The clean script ensures that there is no data left over on the medium from other transactions.

    Note that the label of the current workspace will be applied to the device. Any data transferred to or from the device's medium must be dominated by this label.

  4. Follow the instructions in the clean script dialog boxes to (1) load and make sure the medium has the correct label and (2) mount the device.

    At this point, the medium has been cleaned and the device has been mounted and is ready to be used. The device name now appears in the Allocated Devices list.


    Note -

    Until you close the command tool window, the Device Allocation Manager and its label builder windows are disabled. At this point, you will not be able to use the Device Allocation Manager in this workspace or any other.


  5. Use the device to transfer data.

    At any point, if you switch to a workspace with a different User ID (by assuming a role) or label, you need to make a separate allocation of the device at the label for that workspace. When you use the Occupy Workspace command from the window menu to move the Device Allocation Manager to the new workspace, the Available and Allocated Devices lists change to reflect the correct context.

  6. Deallocate the device when you are finished.

    For the sake of security, you should always deallocate a device when you are finished using it. You can accomplish this by:

    • Double-clicking the device name in the Allocated Devices list

    • Selecting the device and clicking the Deallocate (left-pointing) button

    Deallocating a device runs a clean script that advises unmounts the device and advises you when the media can be removed.

    If you reboot your system while devices are allocated, they become deallocated.