/**/ /***************************************************************************/ /** **/ /** © Copyright 2010, Hewlett-Packard Development Company, L.P. **/ /** **/ /** Confidential computer software. Valid license from HP and/or **/ /** its subsidiaries required for possession, use, or copying. **/ /** **/ /** Consistent with FAR 12.211 and 12.212, Commercial Computer Software, **/ /** Computer Software Documentation, and Technical Data for Commercial **/ /** Items are licensed to the U.S. Government under vendor's standard **/ /** commercial license. **/ /** **/ /** Neither HP nor any of its subsidiaries shall be liable for technical **/ /** or editorial errors or omissions contained herein. The information **/ /** in this document is provided "as is" without warranty of any kind and **/ /** is subject to change without notice. The warranties for HP products **/ /** are set forth in the express limited warranty statements accompanying **/ /** such products. Nothing herein should be construed as constituting an **/ /** additional warranty. **/ /** **/ /***************************************************************************/ /********************************************************************************************************************************/ /* Created: 30-Mar-2010 17:26:36 by OpenVMS SDL EV3-3 */ /* Source: 28-MAR-2005 09:55:56 $1$DGA7274:[LIB_H.SRC]C2DEF.SDL;1 */ /********************************************************************************************************************************/ /*** MODULE $C2DEF ***/ #ifndef __C2DEF_LOADED #define __C2DEF_LOADED 1 #pragma __nostandard /* This file uses non-ANSI-Standard features */ #pragma __member_alignment __save #pragma __nomember_alignment #ifdef __INITIAL_POINTER_SIZE /* Defined whenever ptr size pragmas supported */ #pragma __required_pointer_size __save /* Save the previously-defined required ptr size */ #pragma __required_pointer_size __short /* And set ptr size default to 32-bit pointers */ #endif #ifdef __cplusplus extern "C" { #define __unknown_params ... #define __optional_params ... #else #define __unknown_params #define __optional_params ... #endif #ifndef __struct #if !defined(__VAXC) #define __struct struct #else #define __struct variant_struct #endif #endif #ifndef __union #if !defined(__VAXC) #define __union union #else #define __union variant_union #endif #endif /*+ */ /* C2 - C2 Subset Definitions */ /* */ /* This structures maps the bits in the SECURITY_POLICY SYSGEN parameter that */ /* are used to enable or remove features that have not been formally evaluated */ /* by the NCSC under our C2/B1 VMS/SEVMS evaluation. */ /* */ /*- */ #define C2$M_ALLOW_DISPLAY_POSTSCRIPT 0x1 #define C2$M_ALLOW_MULTIPLE_DECW_USERS 0x2 #define C2$M_ALLOW_ALTERNATE_TRANSPORTS 0x4 #define C2$M_ALLOW_SPAN_JOB_TREES 0x8 #define C2$M_LOCAL_UPDATE 0x10 #define C2$M_LOCAL_PROFILE 0x20 #define C2$M_ALLOW_CAPTIVE_SPAWN 0x40 #define C2$M_COMPRESS_MAC_STRINGS 0x80 #define C2$M_UPPERCASE_INPUT 0x100 #define C2$M_GUARD_PASSWORDS 0x200 #define C2$M_DOI_AUTHORIZATION_ONLY 0x400 #define C2$M_IGNORE_EXTAUTH 0x800 #define C2$M_INTRUSIONS_ARE_LOCAL 0x1000 #define C2$M_USE_POSIX_UIDGID 0x2000 #define C2$M_ALLOW_SYMLINK_ACCESS 0x4000 #define C2$S_SECPOLDEF 4 typedef struct _secpol { __union { unsigned int c2$l_security_policy; __struct { unsigned c2$v_allow_display_postscript : 1; /* allow display postscript extensions */ unsigned c2$v_allow_multiple_decw_users : 1; /* allow multiple username to connect to DECW$SERVER */ unsigned c2$v_allow_alternate_transports : 1; /* allow unevaluated transports */ unsigned c2$v_allow_span_job_trees : 1; /* allow $SIGPRC to span job trees */ /* The following bits control profile management for cluster object */ /* when the object server is unavailable. Setting these bits will */ /* allow these objects to have inconsistent profiles within a security */ /* domain (cluster). */ unsigned c2$v_local_update : 1; /* allow local profile changes */ unsigned c2$v_local_profile : 1; /* allow local object creation */ unsigned c2$v_allow_captive_spawn : 1; /* allow SPAWN or LIB$SPAWN in CAPTIVE accounts */ unsigned c2$v_compress_mac_strings : 1; /* compress MAC category strings (SEVMS) */ unsigned c2$v_uppercase_input : 1; /* as prior to VMS V7.1 */ unsigned c2$v_guard_passwords : 1; /* ACMEs shall not share */ unsigned c2$v_doi_authorization_only : 1; /* prevent feature mixing */ unsigned c2$v_ignore_extauth : 1; /* ignore user-specific EXTAUTH and VMSAUTH restrictions */ unsigned c2$v_intrusions_are_local : 1; /* consider local intrusions only when set */ unsigned c2$v_use_posix_uidgid : 1; /* perform UID/GID lookup in tcpip proxy database */ unsigned c2$v_allow_symlink_access : 1; /* execute access permits read-attributes on FN and/or backlink */ unsigned c2$v_fill_2_ : 1; } c2$r_fill_1_; } c2$r_fill_0_; } SECPOL; #if !defined(__VAXC) #define c2$l_security_policy c2$r_fill_0_.c2$l_security_policy #define c2$v_allow_display_postscript c2$r_fill_0_.c2$r_fill_1_.c2$v_allow_display_postscript #define c2$v_allow_multiple_decw_users c2$r_fill_0_.c2$r_fill_1_.c2$v_allow_multiple_decw_users #define c2$v_allow_alternate_transports c2$r_fill_0_.c2$r_fill_1_.c2$v_allow_alternate_transports #define c2$v_allow_span_job_trees c2$r_fill_0_.c2$r_fill_1_.c2$v_allow_span_job_trees #define c2$v_local_update c2$r_fill_0_.c2$r_fill_1_.c2$v_local_update #define c2$v_local_profile c2$r_fill_0_.c2$r_fill_1_.c2$v_local_profile #define c2$v_allow_captive_spawn c2$r_fill_0_.c2$r_fill_1_.c2$v_allow_captive_spawn #define c2$v_compress_mac_strings c2$r_fill_0_.c2$r_fill_1_.c2$v_compress_mac_strings #define c2$v_uppercase_input c2$r_fill_0_.c2$r_fill_1_.c2$v_uppercase_input #define c2$v_guard_passwords c2$r_fill_0_.c2$r_fill_1_.c2$v_guard_passwords #define c2$v_doi_authorization_only c2$r_fill_0_.c2$r_fill_1_.c2$v_doi_authorization_only #define c2$v_ignore_extauth c2$r_fill_0_.c2$r_fill_1_.c2$v_ignore_extauth #define c2$v_intrusions_are_local c2$r_fill_0_.c2$r_fill_1_.c2$v_intrusions_are_local #define c2$v_use_posix_uidgid c2$r_fill_0_.c2$r_fill_1_.c2$v_use_posix_uidgid #define c2$v_allow_symlink_access c2$r_fill_0_.c2$r_fill_1_.c2$v_allow_symlink_access #endif /* #if !defined(__VAXC) */ #pragma __member_alignment __restore #ifdef __INITIAL_POINTER_SIZE /* Defined whenever ptr size pragmas supported */ #pragma __required_pointer_size __restore /* Restore the previously-defined required ptr size */ #endif #ifdef __cplusplus } #endif #pragma __standard #endif /* __C2DEF_LOADED */