AIX 5L Problem Determination - IBM Redbooks

This defines three levels of privilege among the persons who can manually
assign processes to classes, root being the highest. In order for a user to modify
or cancel a manual assignment, the user must be at the same or a higher level of
privilege as the person who issued the last manual assignment.
Class assignment rules
After the definition of a class, it is time to set up the class assignment rules so
that WLM can perform its automatic assignment. The assignment rules are used
by WLM to assign a process to a class based on the user, group, application path
name, type of process, and application tag, or a combination of these five
attributes.
The next sections describe the attributes that constitute a class assignment rule.
All these attributes can contain a hyphen (-), which means that this field will not
be considered when assigning classes to a process.
Class name
This field must contain the name of a class, which is defined in the class file
corresponding to the level of the rules file we are configuring (either superclass
or subclass). Class names can contain only uppercase and lowercase letters,
numbers, and underscores (_), and can be up to 16 characters in length. No
assignment rule can be specified for the system-defined classes Unclassified,
Unmanaged, and Shared.
Reserved
Reserved for future use. Its value must be a hyphen (-), and it must be present in
the rule.
User
The user name (as specified in the /etc/passwd file, LDAP, or in NIS) of the user
owning a process can be used to determine the class to which the process
belongs. This attribute is a list of one or more user names, separated by a
comma (,). Users can be excluded by using an exclamation point (!) prefix.
Patterns can be specified to match a set of user names using full Korn shell
pattern matching syntax.
Applications that use the setuid permission to change the effective user ID they
run under are still classified according to the user that invoked them. The
processes are only reclassified if the change is done to the real user ID (UID).
Group
The group name (as specified in the /etc/group file, LDAP, or in NIS) of a process
can be used to determine the class to which the process belongs. This attribute
is a list composed of one or more groups, separated by a comma (,). Groups can
286 IBM ^ Certification Study Guide - AIX 5L Problem Determination Tools and Techniques