selang Reference Guide › selang Commands › selang Commands in the AC Environment › showfile Command—Display File Properties

showfile Command—Display File Properties

Valid in the AC environment

The showfile command lists the properties of a file record. The properties are listed in alphabetical order. CA Access Control processes each record independently and displays information only for those resources for which you have sufficient authority.

Note: This command also exists in the native environment but operates differently there.

To execute a showfile command, at least one of the following conditions is required:

• You have at least one of the following attributes: ADMIN, AUDITOR, and OPERATOR.
• You are the owner of the file.
• You are assigned read authority in the access control list of the object representing the FILE class record in the ADMIN class.
• You have the GROUP‑ADMIN or GROUP‑AUDITOR attribute in the group that owns the file or that is a parent of the group that owns the file.

This command has the following format:

{showfile|sf} {fileName |(fileName [,fileName...])} \

[addprops(propName [,propName ...])] \
[next] \
[props(all | propName [,propName ...])] \
[useprops(propName [,propName ...])] \
[nt|unix]

addprops(propName [,propName ...])

Defines properties to be added to the class ruler A ruler is a list of properties to be displayed. Each class has one ruler. If a ruler is defined for a class, when you request a list of property values for a record (for example with a selang show command), by default CA Access Control only shows the properties defined in the ruler. for this query only.

fileName

Specifies the name of the file record whose properties are to be listed.

CA Access Control processes each file record independently. If an error occurs while processing a file, CA Access Control issues a message and continues processing with the next file in the list.

fileName can contain wildcard CA Access Control recognizes wildcard characters for some names. Where it does so, the wildcards it recognizes are * and ?. The * character represents any number of any characters, including no characters; the ? character represents one instance of any character. characters, and so match multiple file names.

On UNIX, to display the properties of a file whose name contains a special character or space, type an extra slash (/) before the file name.

next

Displays parts of the requested data. This option is useful when the query data is larger than the set query size.

The maximum query size is determined by the query_size configuration setting. The default query_size setting is 100.

nt

Displays the Windows file attributes as well as the CA Access Control properties.

props(all|propName [,propName ...])

Defines a new ruler A ruler is a list of properties to be displayed. Each class has one ruler. If a ruler is defined for a class, when you request a list of property values for a record (for example with a selang show command), by default CA Access Control only shows the properties defined in the ruler. for this class for this query and future queries.

unix

Displays the UNIX file attributes as well as the CA Access Control properties.

useprops(propName [,propName ...])

Defines a ruler A ruler is a list of properties to be displayed. Each class has one ruler. If a ruler is defined for a class, when you request a list of property values for a record (for example with a selang show command), by default CA Access Control only shows the properties defined in the ruler. for this query only. The class ruler is unaffected.

Example

The user root wants to list the properties of the file record /etc/passwd.

• User root has the ADMIN attribute.

  showfile /etc/passwd
  

More information:

checklogin Command—Determine Login Information

chfile Command—Modify File Records

rmfile Command—Delete File Records

showfile Command—Display Native File Properties