Command Reference › LOGMSG Command (CA VM:Secure only) › Description

Description

The LOGMSG command supplements the CP log message facility. It allows you to create messages to send to user IDs at specific events, such as logon, issuing requests that are not covered by a rule in the Rules database, or making an error in the LOGON or DIAL procedure.

The LOGMSG command places you in a file in which you can write the desired log message for each type of event. Message files are stored on the CA VM:Secure A‑disk.

Examples

• You have just installed the Rules Facility and are writing rules to restrict system access. During this time, you are using a NORULE ACCEPT record in the CA VM:Secure SECURITY CONFIG file for your system, so that users can still have access to resources. To help you to create the necessary rules, create a message that displays after each access request that was accepted by the NORULE ACCEPT record. This message tells the issuer to contact a security administrator to write a rule so that the issuer can perform a certain activity. Create the message by entering:

  vmsecure logmsg norule
  

  You are placed in a file so that you can enter the text of the message. When you are finished, save and exit the file.

  In order for this log message to appear, you must also include a DISPRULE ALL or DISPRULE NORULE record in the SECURITY CONFIG file.

• You have created all the necessary rules to make your system closed, and you now have a NORULE REJECT record in the CA VM:Secure SECURITY CONFIG file. You no longer need users to receive the NORULE message, so you delete it by entering:

  vmsecure logmsg norule (erase
  

• To create a logon message for members of security group ADMINGRP, enter:

  vmsecure logmsg admingrp
  

  You are placed in a file so that you can build a log message to be sent to members of ADMINGRP when they log on.

• To create a log message to be sent to all users as they log on, enter:

  vmsecure logmsg system
  

Note: For information about displaying existing log message files, see the QUERY Command.