Asecure(1M): Asecure - HP B2355-92068 Administration Manual

asecure(1M)
NAME
asecure - control access to Audio on a workstation
SYNOPSIS
/opt/audio/bin/asecure
a
[ user] [
+u
DESCRIPTION
On Series 700 workstations, audio is secured so that only the user on the local workstation can access
audio. You use the
tions; on an X station, access to audio is unrestricted.
To modify audio security, become root on the local workstation where you want make a change. Then, use
as follows:
asecure
/opt/audio/bin/asecure -C
When prompted, enter any meaningful password. Issuing
(ASF). The ASF contains information that determines which hosts and users can access the Aserver, and
which users (other than the superuser) can modify the ASF.
If needed, you can allow unrestricted access to audio on this workstation. To remove audio security, issue
this command:
/opt/audio/bin/asecure -d
If instead, you wish to modify security, you use
(Because the ASF is a binary file, we do not recommend using an editor on this file.) You can use
to make these types of changes:
asecure
• Allow all clients from a remote host to access the server.
• Allow specific users from all other hosts to access the server.
• Allow a specific user from a specific host to access the server.
• Disable access control, allowing complete unrestricted access to the server, but leaving the ASF
intact.
Every operation that creates, reinitializes, or changes the contents of the ASF is logged in the
/var/adm/audio/asecure_log
Options
supports the following options:
asecure
+b|-b
-C
-d
-e
68 Hewlett-Packard Company
[ -CdelP
user] [ host user] [
-u +b ,
command to modify audio security. This command does not apply to X sta-
asecure
file, so that you can track any changes to the ASF.
host,user
Add/delete hostname,username pair. You must be either superuser or a privileged
user to do this. You can supply more than one hostname,username pair separated by
blanks.
To use either the
hostname,username pair. This option will not work without a pair.
Create a new ASF file, called the
with no entries in the access list. Aserver can now be accessed only by local users on
the host machine. If an
You must be superuser to execute this option. This option is mutually-exclusive of all
other options.
This option requires a password. This is an extra layer of protection for the contents of
the ASF. It is designed to prevent surreptitious manipulation of the ASF. If you are
creating a new ASF, you are prompted for a password and an encrypted copy of that
password is stored in the new ASF.
If the ASF already exists, you are prompted for the password. If your password
matches the password stored in the ASF, the ASF is then re-initialized.
Disable access control to the Aserver. This allows unrestricted access by all clients.
Enable access control to the Aserver. This restricts access to clients listed in the ASF.
Enabled is the default state.
] [ +h host] [ -h host] [ +p
host user]
-b ,
asecure -C
to make changes to the information in the ASF.
asecure
or options, you MUST supply at least one
+b -b
file. Access control default is enabled
audio.sec
file already exists, it is re-initialized.
audio.sec
− 1 −
HP-UX 11i Version 2: December 2007 Update
asecure(1M)
user] [ -p user]
creates the Audio Security File