Rules Facility Guide › Security with the Rules Facility › Querying the Rules Database › RULEMAP Command

RULEMAP Command

Use the RULEMAP command to display information about the contents of a rules file and members of security groups.

Typical authorizations to the RULEMAP command allow security administrators to display rules file information at the system, security group, or user level. Authorized security group managers can display rules file information for the security group they manage and for any member of their security group. Authorized general users can display rules file information about their rules files and any security groups they are members of.

Example

To see which rules have been created that pertain to your user ID, enter the following:

vmsecure rulemap

The system responds as follows:

DEFAULT SYSRULES: ACCEPT YOURID AUTOLOG ( HISTORY
OVERRIDE SYSRULES: ACCEPT YOURID MEMBER
LILITHS USRRULES: ACCEPT YOURID LINK * * ( HISTORY

You do not need to specify your user ID, because that is the default. In this example, a system default rule allows YOURID to autolog other virtual machines, and places a history statement in the other user ID’s directory entry whenever this occurs. The system override rule allows you to become a temporary member of any security group. Finally, user ID LILITHS has created a rule allowing you to link to any of her virtual devices in any link mode with a record of the links being entered in her history information.

Note: For more information about using the RULEMAP command, see the Reference Guide.