Endpoint Administration Guide for UNIX › Improving Performance › Using the Resource Cache

Using the Resource Cache

Another performance improvement tool that CA ControlMinder offers is resource caching (file cache).

The cache “remembers” the previous answer to an authorization request (permit or deny) for resources in the FILE class. The result is saved with the file name, user name, and authorization response (access mode, program name, and result). When an identical authorization is requested, the request is answered with the last response that was stored in the cache memory tables. This saves time because CA ControlMinder does not have to reevaluate the request; CA ControlMinder can return the answer immediately. When rules are changed, the cache is automatically and immediately synchronized.

The cache is a runtime table. An administrator can configure it in two ways:

• Set initialization parameters in the seos.ini file.
• Switch caching to ON or OFF and change parameters at runtime.

The security administrator can define table size, intervals between cleaning tables, and other internal table parameters with tokens in the seos.ini file.

A user with administrative privileges can switch cache tables ON or OFF, change cache parameters, and write cache tables to standard output.

Note: For more information about the secons utility or the [seosd] section of the seos.ini initialization file, see the Reference Guide.