man pages section 4: File Formats

device_deallocate(4)

NAME

device_deallocate- Device deallocate file

SYNOPSIS

/etc/security/device_deallocate

DESCRIPTION

The device_deallocate file can contain device deallocation information for allocatable devices. Its entries parallel those of the device_allocate(4) file. An entry for a device has the form:

device-name ; system-boot ; user-logout ;

A backslash (\) at the end of a line continues the next line as part of the current entry. Leading and trailing blanks are allowed in any of the fields.

device-name

The name of the device. This must match the name of the device in the device_allocate(4) file.

system-boot

Specifies what to do when the named device is found during system boot in an allocated state. This field may be one of these keywords:

DEALLOCATE: Deallocate the device.
NO_ACTION: Leave the device in the allocated state.

user-logout

Specifies what to do when a user logs out from the window system.

The user-logout action applies to any form of logout from the window system, whether initiated by the user, an administrator, or the system. This includes logout due to a system shutdown. It does not apply to other types of logouts, such as exiting from an rlogin, telnet or ftp session, or exiting from a role.

The user-logout applies to devices that are allocated by the user who is logging out from the window system. It applies regardless of whether the user allocated the device from the window session or by some other means (such as from a telnet session or a cron_job). If the device is allocated by a different user or by a role, it remains allocated.

This field may be one of these keywords:

DEALLOCATE: Deallocate the device.
NO_ACTION: Leave the device in the allocated state.

If a device does not have an entry in the device_deallocate file, the default action is NO_ACTION for both system-boot and user-logout. device_deallocate should be at a sensitivity label of ADMIN_LOW with permission bits 644, owner root, and group sys.

NOTES

The preferred method of modifying this file is by use of the Device Administration function of the Device Allocation Manager.

EXAMPLES

Example 1 Deallocating the st0 device upon boot

st0;DEALLOCATE;NO_ACTION;

This entry causes the st0 device to be deallocated at system boot. No action is taken at the time of logout from the window system.

Example 2 Deallocating the CD-ROM device only upon login session termination

cdrom_0;NO_ACTION;DEALLOCATE;

This entry causes the cdrom_0 device to be deallocated when the user who allocated it logs out from the window system. It will also be deallocated when the system is rebooted, since system shutdown forcibly logs out all users, so there is no functional difference between this entry and cdrom_0;DEALLOCATE;DEALLOCATE.

FILES

/etc/security/device_allocate: Administrative file defining parameters for device allocation.
/etc/security/device_deallocate: Administrative file defining parameters for device deallocation.

Trusted Solaris 8 4/01 Reference Manual

allocate(1), deallocate(1), list_devices(1), remove_allocatable(1M), device_allocate(4)

Trusted Solaris 8 4/01 Last Revised 15 Sep 2000