Job Management Partner 1/Client Security Control Description, User's Guide and Operator's Guide

16.7 Policy assignment definition file

This file is used when executing the security policy assignment command (cscassign). Define the policy recipients and the policy names in this file. Create the file with any file name in any directory.

Organization of this section

(1) Synopsis

(2) Definition contents

(3) Specification example

(1) Synopsis

 
category,keyword,judgment-policy-name,action-policy-name,option{ 0|1 } 
category,keyword,judgment-policy-name,action-policy-name,option{ 0|1 } 
    :
    :
 

Legend: : Line feed code

(2) Definition contents

The following table shows the contents to define in this file.

Table 16-22 Definition contents of a policy assignment definition file

No.	Item	Setting value
1	Category	Specify the policy recipients. ALL: All clients PC: Clients with the asset number specified in keyword. GROUP: Clients in the group specified in keyword.
2	Keyword	Specify a keyword for searching for clients. The specifiable contents depend on the value specified in category, as follows: ALL specified in category Omit. If specified, a syntax error occurs. PC specified in category Specify the client's asset number using a string with 60 or fewer bytes. GROUP specified in category Specify the group name (path from the highest level) using a string with 512 or fewer bytes. Delimit each part of the path with a forward slash (/).
3	Judgment policy name	Specify the name of the judgment policy to assign to the specified clients using a string with 128 or fewer bytes. Omit this item if you do not want to assign a judgment policy.
4	Action policy name	Specify the name of the action policy to assign to the specified clients using a string with 128 or fewer bytes. Omit this item if you do not want to assign an action policy.
5	Option	Specify the client search method based on the keyword. This item is valid only when GROUP is specified in category. 0: Match word beginning 1: Match exactly The default is 0.

Note the following coding conventions:

• Lines beginning with the hash symbol (#) are treated as comments.
• When specifying group names by keyword, you must specify each part of the group name correctly, even if you specify 0 (match word beginning) in option.
  For example, to assign a policy to group Sales Department, which comes under group Yokohama Office, specify Yokohama_Office/Sales_Department. If any part is incomplete, as in Yokohama_Office/Sales, even though part of the specified path may match an existing group name, no matching group (clients) will be found and the policy will not be assigned.
  
• You can write multiple lines in the file.
• End every line with a line feed code. The line feed code is 0x0d0a. Lines containing only a line feed code are ignored.
  

  Reference note

  The following table shows the clients that will be assigned the policy when a group name is specified in keyword and Sales Department is a group under the Yokohama Office group.

  No.	Group name specified in keyword	Applicable clients
  1	Yokohama_Office/Sales_Department	Clients belonging to Sales_Department.
  2	Yokohama_Office/Sales	None
  3	Yokohama_Office	Clients belonging to Yokohama_Office including those in Sales_Department.

(3) Specification example

 
ALL,,(default policy),(default policy) 
GROUP,Head_Office/Sales_Department/Sales1,,ActionPolicy1,0 
PC,1000000001,JudgmentPolicyB,ActionPolicy2 
 

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, 2011, Hitachi, Ltd.
Copyright, patent, trademark, and other intellectual property rights related to the "TMEng.dll" file are owned exclusively by Trend Micro Incorporated