16.12.2012 Views

z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Related Information<br />

chmod, chown<br />

chlabel — Set the multilevel security label of files and directories<br />

Format<br />

Description<br />

Options<br />

Usage notes<br />

chlabel [–cqR] [–h|–L] seclabel pathname ...<br />

chlabel sets the multilevel security label of the files and directories specified by<br />

pathname. Setting the seclabel is only allowed if the user has RACF SPECIAL<br />

authority, and no seclabel currently exists on the resource. Once a seclabel is set, it<br />

cannot be changed.<br />

seclabel is a 1-8 character multilevel security label that corresponds to a RACF<br />

security level with a set of zero or more security categories. See z/<strong>OS</strong> Planning for<br />

Multilevel Security and the Common Criteria for restrictions on seclabel.<br />

If chlabel could not set the seclabel for a file or object, it continues to try to change<br />

the other files but exits with a nonzero status.<br />

When –R is specified, chlabel will not cross device boundaries from the directory<br />

specified by pathname. unless the –c option is used.<br />

–c cross device boundaries.<br />

–h Does not follow the symbolic link (or external link), but instead makes<br />

changes to the symbolic link (or external link) itself. Cannot be used with<br />

–L.<br />

–L Follow symbolic links. Cannot be used with –h.<br />

–q Quiet mode. chlabel will suppress all warning messages. The condition that<br />

caused the warning will not affect the exit value.<br />

–R chlabel sets the seclabel on all the file objects and subdirectories under the<br />

directory specified by pathname.<br />

1. See z/<strong>OS</strong> Planning for Multilevel Security and the Common Criteria for more<br />

information about multilevel security, and seclabels.<br />

2. chlabel will not set the seclabel for a symbolic link, or for the file to which it<br />

points, unless either the –h or –L option is specfied. If neither option is specfied,<br />

chlabel prints a warning, continues to the next file and exits with a non-zero<br />

status.<br />

3. chlabel is typically run to set up seclabels on file systems before multilevel<br />

security is activated.<br />

4. Only the zFS file system supports the setting of seclabels.<br />

chgrp<br />

5. The SECLABEL CLASS must be active before the chlabel command will set a<br />

security label. If the SECLABEL CLASS is inactive, security labels will not be<br />

set.<br />

Chapter 2. Shell command descriptions 123

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!