Specifications

Using Callable System Routines
10.3 System Services
Table 10–3 (Cont.) Summary of System Services
Service Function
System Security Services
$CHECK_ACCESS Invokes system access protection check on behalf of
another user.
$CHECK_PRIVILEGE (and $CHECK_
PRIVILEGEW)
Determines whether the caller has the specified privileges
or identifiers (and wait).
$CHKPRO Invokes system access protection check.
$CMEXEC Changes the access mode of the calling process to
executive mode.
$CMKRNL Changes the access mode of the calling process to kernel
mode.
$CREATE_RDB Initializes a rights database.
$CREATE_USER_PROFILE Returns and encoded security profile for a user.
†$DELETE_INTRUSION Searches for and deletes all records in the intrusion
database matching the caller’s specifications.
†$DELETE_PROXY Deletes an existing proxy or removes the default user
or the local user from an existing proxy in the proxy
database.
†$DISPLAY_PROXY Returns information about one or more existing proxies.
$ERAPAT Generates a security erase pattern.
$FIND_HELD Returns identifiers held by a holder in rights database.
$FIND_HOLDER Returns holders of an identifier in rights database.
$FINISH_RDB Deallocates record stream and clears context value when
searching the rights database.
$FORMAT_ACL Formats ACE into a text string.
$FORMAT_AUDIT Converts a security auditing event message from binary to
ASCII.
$GETUAI Returns authorization information about a specified user.
$GET_SECURITY Returns information about security characteristics of a
selected object.
$GRANTID Adds identifier to process or system rights list.
$HASH_PASSWORD Applies a hash algorithm to an ASCII password string
and returns a quadword hash value that represents the
encrypted password.
$IDTOASC Translates identifier value to its identifier name.
$MOD_HOLDER Modifies holder record in rights database.
$MOD_IDENT Modifies identifier record in rights database.
$MTACCESS Controls magnetic tape access.
$PARSE_ACL Converts text ACE into binary format.
$REM_HOLDER Deletes holder record from identifier’s list of holders in
rights database.
$REM_IDENT Deletes identifier and all holders of that identifier from
rights database.
†VAX specific
(continued on next page)
10–13