NAME | SYNOPSIS | DESCRIPTION | EXAMPLES | NOTES | FILES | SEE ALSO
/etc/security/tsol/device_deallocate
The device_deallocate file contains device deallocation information for each physical device. Each device is represented by an entry of the form:
device-name ; system-boot ; user-logout ; forced-logout ;
A backslash (\) at the end of a line continues the next line as part of the current entry. A pound sign (#) as the first character of a line indicates a comment line, which is ignored. Leading and trailing blanks are allowed in any of the fields.
The name of the device.
Specifies what to do when the named device is found during system boot in an allocated state. This field may be one of these keywords:
Deallocate the device.
Leave the device in the allocated state.
Specifies what to do when the named device is allocated to a user who is logging out. This field may be one of these keywords:
Ask the user whether to deallocate the device.
Deallocate the device.
Leave the device in the allocated state.
Specifies what to do when the named device is allocated to a user who is being forced to log out. This field may be one of these keywords:
Deallocate the device.
Leave the device in the allocated state.
device_allocate should be at a sensitivity label of ADMIN_LOW with permission bits 644, owner root, and group sys.
Users may specify their own device deallocation options locally in their home directories in a file named .device_deallocate. The local file has the same format, and its entries take precedence; however, a local file's system-boot field is ignored and has no effect.
st0;\ FORCED_DEALLOCATE;\ NO_ACTION;\ NO_ACTION;\ # scsi tape
The device_deallocate file is not read by deallocate(1M). Rather, it is read by a GUI or a script program at the events of system boot, user logout, and forced logout. The program in term invokes the deallocate command when actual device deallocation is required.
Device deallocate file
User-customized device deallocate file
NAME | SYNOPSIS | DESCRIPTION | EXAMPLES | NOTES | FILES | SEE ALSO