SAS 9.3 Guide to Software Updates

Set File Security in UNIX Environments
The login.config file contains login module definitions for connecting to SAS Remote
Services by using the SAS Metadata Server. Because this file contains connection
information, you want to restrict access to this file. To restrict access to the owner of this
file, type the following commands at the UNX prompt:
cd SAS-configuration-directory/Lev1/Web
chmod go=Common/login.config
Restore Restrictive Policy Settings
If you configured your environment to use restrictive policy settings, then you had to
disable these policy settings before installing your SAS software. How you restore these
settings depends on whether SAS automatically reconfigured JBoss and whether you
specified to use restricted permissions in your initial deployment. Use the following table
to determine the post-configuration steps for your site.
Table 13.1 When Post-Configuration Steps Are Required
Type of Configuration Post-Configuration Steps
SAS automatically
reconfigures the JBoss
server and re-creates the
restrictive policy file.
If you selected to use restrictive permissions the first time you
configured your SAS 9.3 deployment, then SAS specified the
following options in the start-up script:
n -Djava.security.manager
JBoss Application Server 83
n -Djava.security.policy=full-path-to-restrictivepolicy-file
Therefore, you do not need to specify these options again.
When SAS automatically restarts the JBoss server, the
restricted permissions file should be created and copied to the
server.