Domain: | SECURITY-ADMINISTRATION |
Privileges: | STD-PROCESSING, GUARD-ADMINISTRATION |
This command can be used to display default protection rules which are entered in one or more rule containers DEFAULTP).
SHOW-DEFAULT-PROTECTION-RULE(SHO-DEF-PRO-R) | ||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||
RULE-CONTAINER-GUARD = <filename 1..24 without-gen-vers with-wild(40)>
This operand designates the name of the rule container of type DEFAULTP whose rules are to be displayed.
If wildcards are used in the name of a rule container, a single command displays the rules present in multiple containers.
The length of the name without wildcards, catalog ID and user ID must not exceed 8 characters.
Only a guard administrator can specify wildcards in the user ID.
The specification of the system default ID in the container name, e.g. $<filename> or $.<filename>, is not supported.
SELECT=
This operand is used to define the selection criterion.
SELECT = *ALL
All the rules are to be displayed.
If INFORMATION=*RULES is specified, then this means:
the name of the rule container is displayed together with all the rules it contains.
If INFORMATION=*CONTAINER-GUARD-NAMES-ONLY is specified, this means:only the name of the rule container is displayed.
SELECT = *BY-RULES(...)
A precisely specified rule is displayed.
If INFORMATION=*RULES is specified, this means:
the name of the rule container is displayed together with the selected rule.
If INFORMATION=*CONTAINER-GUARD-NAMES-ONLY is specified, this means:the name of the rule container is displayed.
PROTECTION-RULE = name 1..12 with-wild(20)>
Name of the rule which is to be displayed. The name can be specified using wildcards.
INFORMATION=
Specifies the extent of the information which is to be output.
INFORMATION = *RULES
The name of the rule container is displayed together with the rules it contains.
INFORMATION = *CONTAINER-GUARD-NAMES-ONLY
Only the container names are output.
OUTPUT = list-poss(2):
This operand defines the destination of the output.
OUTPUT = *SYSOUT
Output is sent to the terminal if the command was issued in interactive mode. In batch mode, the output destination depends on the specifications in the job.
OUTPUT = *SYSLST(...)
Output is sent to the system file SYSLST.
SYSLST-NUMBER = *STD
Output is sent to the system file SYSLST.
SYSLST-NUMBER = <integer 1..99>
Two-digit number nn used to form the file name SYSLSTnn.
Output layout (INFORMATION = *RULES)
Example
A guard administrator has created a user-specific and pubset-global rule container under the user ID TSOS. The system administrator then made a backup copy of each before modifying the two rule containers.
The guard administrator enters the following command:
|
Output layout (INFORMATION = *CONTAINER-GUARD-NAMES-ONLY)
A guard administrator enters the following command:
|
The format of the output is not guaranteed.
Command return codes
(SC2) | SC1 | Maincode | Meaining |
0 | CMD0001 | Command successfully executed | |
1 | DEF3100 | An incorrect operand value was detected. | |
32 | DEF3200 | An internal error has occurred. A SERSLOG entry has been generated to permit detailed analysis. | |
64 | DEF3300 | The specified rule container does not exist. | |
64 | DEF3301 | No rule was found which corresponds to the specified selection criteria. | |
64 | DEF3302 | The user is not authorized to execute the function. | |
64 | DEF3304 | No rule container as found which corresponds to the specified selection criteria | |
64 | DEF3306 | A specified guard is not of the required guard type. | |
64 | DEF3308 | A user ID is unknown. | |
64 | DEF3309 | Remote file access not supported. | |
64 | DEF3310 | A rule was not found in the rule container. | |
64 | DEF3313 | A specified public volume set is not available. | |
64 | DEF3314 | Error in MRS communications resources. | |
64 | DEF3315 | A specified public volume set is not known in the local GUARDS administration. | |
128 | DEF3900 | There is no longer sufficient system storage space available. | |
128 | DEF3901 | A guard which has to be processed is currently locked by another task and cannot be processed at the present time. | |
128 | DEF3902 | A guard is temporarily unavailable because the GUARDS catalog is being changed or a master change is taking place in the computer network. | |
128 | OPS0002 | Output of S variables has been aborted | |
130 | OPS0001 | It was not possible to output the S variables | |
32 | CMD2009 | System error during output of S variables |
Output in S variables
The command’s INFORMATION operand is used to determine which of the S variables are to be assigned values. The following specifications are possible for INFORMATION:
Notation in command | Abbreviated notation in table |
INFORMATION = *RULES | 1 |
INFORMATION = *RULE-CONTAINER-GUARD-NAMES | 2 |
Output information | Name of the S variable | T | Contents | Condition |
Name of the rule container | VAR(*LIST).RULE-CONTAIN-GUARD | S | <filename 1..24> | 1, 2 |
Specification of whether rule | VAR(*LIST).CONTAIN-CONDITION | S | PVS ACTIVE | 1 |
Name of the rule | VAR(*LIST). | S | <alphanumeric name | 1 |
Object name in the rule | VAR(*LIST). | S | <filename 1..41 | 1 |
Name of the attribute guard in the | VAR(*LIST). | S | *NONE | 1 |
Name of the user ID guard in the | VAR(*LIST). | S | *NONE | 1 |