Man Pages (4): File Formats

device_deallocate(4)

NAME

device_deallocate- Device deallocate file

SYNOPSIS

/etc/security/tsol/device_deallocate

DESCRIPTION

The device_deallocate file contains device deallocation information for each physical device. Each device is represented by an entry of the form:

device-name ; system-boot ; user-logout ; forced-logout ;

A backslash (\) at the end of a line continues the next line as part of the current entry. A pound sign (#) as the first character of a line indicates a comment line, which is ignored. Leading and trailing blanks are allowed in any of the fields.

device-name

The name of the device.

system-boot

Specifies what to do when the named device is found during system boot in an allocated state. This field may be one of these keywords:

FORCED_DEALLOCATE: Deallocate the device.
NO_ACTION: Leave the device in the allocated state.

user-logout

Specifies what to do when the named device is allocated to a user who is logging out. This field may be one of these keywords:

ASK_USER: Ask the user whether to deallocate the device.
FORCED_DEALLOCATE: Deallocate the device.
NO_ACTION: Leave the device in the allocated state.

forced-logout

Specifies what to do when the named device is allocated to a user who is being forced to log out. This field may be one of these keywords:

FORCED_DEALLOCATE: Deallocate the device.
NO_ACTION: Leave the device in the allocated state.

device_allocate should be at a sensitivity label of ADMIN_LOW with permission bits 644, owner root, and group sys.

Users may specify their own device deallocation options locally in their home directories in a file named .device_deallocate. The local file has the same format, and its entries take precedence; however, a local file's system-boot field is ignored and has no effect.

EXAMPLES

st0;\
	FORCED_DEALLOCATE;\
	NO_ACTION;\
	NO_ACTION;\
	# scsi tape

NOTES

The device_deallocate file is not read by deallocate(1M). Rather, it is read by a GUI or a script program at the events of system boot, user logout, and forced logout. The program in term invokes the deallocate command when actual device deallocation is required.

FILES

/etc/security/tsol/device_deallocate: Device deallocate file
$HOME/.device_deallocate: User-customized device deallocate file

Trusted Solaris 7 Reference Manual

add_allocatable(1M), allocate(1M), deallocate(1M), list_devices(1M), remove_allocatable(1M)

SunOS 5.7 Reference Manual

attributes(5)

Trusted Solaris 7 Last Revised 12 May 1997