Revoke (Super Id) Guidelines - HP T6553 D45 Reference Manual

FUP Commands
PROGID
sets the process accessor ID to the owner ID of the program file when the
program file is run (for program files only). Including PROGID in a REVOKE
command revokes the PROGID option for the file. The process accessor ID is
set to the ID that corresponds to the creator of the process when the program
is run.

REVOKE (Super ID) Guidelines


To revoke the LICENSE attributes of a file, you cannot specify the
CLEARONPURGE attribute and the PROGID attribute.

A Super.Super user is allowed to reset the PROGID and CLEARONPURGE
security attributes of a Safeguard protected file if the underlying persistent
protection record does not explicitly DENY ownership permission to
Super.Super.

A non-Super.Super user is allowed to reset the PROGID and
CLEARONPURGE security attributes of a Safeguard protected file under the
following conditions:
1. The requestor (non-Super.Super user) is the owner of the file as recorded in
the disk label.
2. The READ (R) permission must be provided to the user while adding to
safeguard protection using Safeguard command interpreter (SAFECOM)
otherwise user receives FileSystem Error 48(Security Violation).
3. The new owner has ownership permission as per the underlying persistent
protection record.

User other than owner in the same group can reset the PROGID and
CLEARONPURGE security attributes of a Safeguard protected file if the
OWNERSHIP (O) permission is given to the user while adding to safeguard
protection using SAFECOM.

FUP returns the error message "SAFEGUARD IS NOT LICENSED", if the
safeguard object is not licensed.

If a user ID other than the super ID (255, 255) tries to revoke the license for a
privileged program (by omitting all secure-options from the command), you
receive file-system error 48 (security violation).

Use the PARTONLY option with REVOKE:

To revoke an attribute of a secondary partition named in fileset-list.
Otherwise, the REVOKE command fails with file-system error 72 (attempt to
access an unmounted partition).

To revoke an attribute of the primary partition only. Otherwise, FUP revokes the
attribute for all partitions of the file.
File Utility Program (FUP) Reference Manual—523323-014
2-164
REVOKE (Super ID) Guidelines