Technical data
Programming Release Notes
6.27 System Services
6.27.3 $PERSONA System Services: Default Privilege Change (Alpha Only)
V7.2
The default behavior in assigning persona privileges has changed in OpenVMS
Alpha Version 7.2. Prior to this release, a persona was created with the
authorized privileges from the specified user’s UAF record as the default
privileges. The user’s default privileges would be used only if the IMP$V_
ASSUME_DEFPRIV flag was set in the call to $PERSONA_CREATE.
This default behavior is inconsistent with OpenVMS security policy and has been
changed for OpenVMS Alpha Version 7.2. The new default behavior builds the
persona with privileges as specified in the user’s UAF record.
For existing programs to run correctly on OpenVMS Alpha Version 7.2, you may
need to modify the user’s UAF records so that the default privileges specified are
equivalent to authorized privileges.
Two new flags have been added to the $PERSONA_CREATE system service.
ISS$V_CREATE_DEFPRIV is equivalent to the IMP$V_ASSUME_DEFPRIV
flag of earlier releases and is provided solely for backward compatibility. ISS$V_
CREATE_AUTHPRIV is provided to allow the caller to implement the default
behavior of earlier versions of OpenVMS, that is, to use the user’s authorized
privileges as default privileges.
The behavior for $PERSONA_CREATE on OpenVMS VAX Version 7.2 remains
unchanged.
6.27.4 $PERSONA System Services: Audit Record Change (Alpha Only)
V7.2
The audit record for persona creation has changed from type Server Login to
type Persona Created. A persona is created by calling the $PERSONA_CREATE
system service.
6.27.5 Linking SECURESHR Images to Run on Older Versions
V7.0
Some additional entry points have been added to the shareable image dispatch
vector. Because of this change, any applications linked against Version 7.0 or
later of SECURESHR will not run on a pre-Version 7.0 system. System services
that use SECURESHR are the following:
$FORMAT_ACL
$PARSE_ACL
$FORMAT_AUDIT
$DELETE_INTRUSION
$SCAN_INTRUSION
$SHOW_INTRUSION
$ADD_PROXY
$DELETE_PROXY
$DISPLAY_PROXY
$VERIFY_PROXY
If your program uses any of these system services and you want to create a
version that runs on systems prior to Version 7.0, you must link your program on
a system running a version of OpenVMS prior to Version 7.0.
Programming Release Notes 6–29