Endpoint Administration Guide for Windows › Scope of Administration Authority › Default Permissions to Access the Database

Default Permissions to Access the Database

CA ControlMinder protects the internal database, seosdb, with internal file rules when it is running. Internal file rules are not visible in selang and cannot be deleted. You can write FILE rules to override the internal file rules. If you delete these FILE rules, CA ControlMinder reverts to the internal file rules.

The following internal file rules protect the database when CA ControlMinder is running:

• CA ControlMinder internal processes have full access to the database
• The NT AUTHORITY\System user has read access to the database
• All other accessors have no access to the database

Note: The default access rights for all other accessors were changed in r12.5 SP3. In previous releases, all other accessors had read access by default to the database files.

By default CA ControlMinder services run automatically after you install CA ControlMinder or reboot the endpoint. Consequently, the only user who can access the database out of the box is NT AUTHORITY\System. The CA ControlMinder administrators that you define during installation can also use a utility such as selang to update the database.