files(F)

files -- file control database

Format

Description

The file control database (/etc/auth/system/files) assists the system administrator in maintaining the integrity of the system. The database contains entries for system data files and executable files that require certain attributes to provide protection against unauthorized access, or to perform their intended function.

The file control database is consulted by programs such as integrity and fixmog. Trusted programs use the database to ensure that the attributes of created files are set correctly.

The following attributes can be specified:

f_group

Specifies the group name for the entry. If a group name is not specified for an entry when the file is created, the group of the file will become the real group ID of the process creating the file.

f_mode

Specifies the mode for the entry. If the mode is not specified when the file is created, a mode of 0 is assigned to the new file.

f_owner

Specifies the owner name for the entry. If an owner name is not specified for an entry when the file is created, the owner of the file will become the real user ID of the process creating the file.

f_type

Identifies the type of the file. The following type values are defined:

r: regular file
d: directory
c: character special device
b: block special device

Examples

The following is an example of a file control database entry:

   /bin/passwd:f_owner=bin:f_group=auth:\
   	:f_mode#02111:f_type=r:\
   	:chkent:

This entry specifies that the owner of the passwd program is bin, that its group is auth, that it is a regular file, and that its mode is 02111.

Files

/etc/auth/system/files: file control database

Standards conformance