Using protected subsystems

A protected subsystem is a collection of files, devices, and commands that protect a set of resources and perform security tasks.

The C code for a protected subsystem has the following characteristics:

• 
  SecureWare must be defined in all programs that use the trusted software. Use the -DSecureWare option from CFLAGS on the compile line, or make sure the first line in the code is:

     #define SecureWare
  

• Programs in a protected subsystem must have the following lines to reference required header files:
  
  
  

     #include <sys/security.h>	/* kernel data structures*/ 
     				/* used for security functions*/
     #include <sys/audit.h>		/* audit data structures */
     #include <prot.h>		/* data structures used by libprot*/
  

• The first action in the main() routine must be set_auth_parameters as defined in the identity(S) manual page. Line 19 of ``subsys.c example'', is an example of using set_auth_parameters.

• The program must be linked with the -lprot flag. An example link command is cc myprogram.c -lprot.