HP-UX Reference (11i v3 07/02) - 4 File Formats (vol 8)

e
evm.auth(4) evm.auth(4)
NAME
evm.auth - EVM authorization file
SYNOPSIS
event_rights {
class
event_class
post rights_list
access rights_list
}
service_rights {
service service_name
execute rights_list
}
DESCRIPTION
Authorization is control of the right to post, subscribe to, or retrieve an EVM event, or to execute services
defined in the EVM daemon configuration file.
The evm.auth file is a text file that controls event authorization. Any portion of a line from an unquoted
number sign (#) to the end of line is a comment. Blank lines are ignored. The following authorization con-
trols are recognized:
event_rights The rights specified apply to event posting and subscription.
class event_class Class of events to which these rights apply. An event_class is a string of one or
more components that match the same set of components in an Event Name.It
is used to identify a family of events for purposes such as authorization. The more
specific classes (those with more components) override the rights indicated by the
less specific (more generic) classes.
post rights_list Users specified by the rights_list are allowed or denied the right to post events of
this event_class.
access rights_list Users specified by the rights_list are allowed or denied the right to subscribe to or
retrieve from the log, events of this event_class.
rights_list A list of users or groups who have or are denied the specified right for this event or
service class. Entries are separated by commas.
A rights_list has the format:
[+|-][user|group=groupname]
In the previous rights_list, user is the login name of any user, and groupname is
any group. The keyword
group may be abbreviated to grp. A leading plus char-
acter (+) signifies that event or service rights are granted. A leading minus charac-
ter (-) signifies that rights are explicitly denied. User root has implicit posting
and access rights to all events, and execute rights to all services, unless they are
explicitly denied.
The first explicit entry for a user in a rights list takes precedence over any other
explicit or group entries for that user. If the user is not explicitly listed, but is a
member of a group which denies access, access is denied even if the user is also a
member of a group for which access is granted.
A plus or minus sign with no associated name grants or denies rights to all users.
The rights_list must be enclosed in double quotes if it contains spaces.
service_rights The rights specified apply to services performed by the daemon for a requesting
client.
service service_name
The service to which these rights apply. The service_name is the name of a service
defined in the evmdaemon.conf file. User-defined services are not currently
supported.
execute rights_list Users specified by the rights_list are allowed or denied the right to request opera-
tion of this service.
HP-UX 11i Version 3: February 2007 − 1 − Hewlett-Packard Company 81