SPS – VOS Command Shells
User Manual
SECURE AND AUDIT USER ACTIVITY
APPLICATION RESOURCES, INC
316 W 78TH STREET, SUITE 4R NEW YORK, NY 10024
516-536-6200 [email protected] [email protected]
TABLE OF CONTENTS
CONTENTS
Introduction 5
SPS and System Security 5
The sps_vcs configuration table 7
Field Definitions 8
The Reports Table (vcs_reports.table) 12
The execute_priv_command.pm program 14
Purpose 14
display Form 14
Lineal Form 14
Arguments 14
Using the SPS/Browser 15
Secuiring the VSS and menu 16
Changing and protecting the user's start_up.cm 16
Purpose 16
display Form 16
Lineal Form 16
Arguments 16
Protecting your Audit-Trail logs 17
Setting VOS security 17
Sample Reports 19
The Menu System 20
SPS Menus vs. Command Macros 20
The Menu Control Table (sps_menu.table) 23
Field Definitions 23
Defining Sub-Menus 27
Preprocessing Parameters 27
Sample Configuration 29
The sps_menu.pm program 30
Purpose 30
display Form 30
Lineal Form 30
Arguments 30
Using the terminal based Menu 31
using the WEB-based Menus 33
How to use 33
The VOS Security Shell 34
Features 34
The sps_vss.pm program 35
Purpose 35
display Form 35
Lineal Form 35
Arguments 35
The Main Screen 38
Listing directories: 38
Listing *table files: 39
Listing *table files with Info-Mode: 40
The directory tree structure: 41
Working with processes 42
List-Users sorted by CPU Usage: 42
List-Users sorted by Page-Faults 43
List-Users sorted by Disk-Writes 43
Shorthand Requests 44
Directory Navigation 49
Executing Commands 50
Operation Codes Area 50
Internal Commands 51
The Command Line 53
The Global Command 53
Programmed Function keys 53
Starting a Sub-process 53
System Configuration 54
You can cycle the FUNCTION field to choose from: 54
INTRODUCTION
VOS Command Shells are two separate software solutions - The SPS/VOS Security Shell and the SPS/Menu System, each targeted for a different groups of users.
To better understand the differences between the two solutions and how they may apply to your system, please review the following diagram:
SPS AND SYSTEM SECURITY
SPS products utilize a robust security layer designed to satisfy the most stringent security and audit requirements. It allows any level of customization, including per-user, per-command profiles, single-point data access control (ACLs)and data encryption. SPS' advanced multi-level,
6
object oriented solution of security requirements provides more granularity and greatly improves upon the single level, all or nothing, approach to security provided with the VOS operating system.
Authorizes command execution based on user's security profile.
Ensures execution of commands from the correct, designated terminals.
Ensures that commands are executed within the allowed timeframes.
Blocks access to restricted modules, systems and devices (production).
Handles security violations; posts warning messages in the system error log and terminates the violator's session.
Generates complete activity and security violations logs and reports date, time, user's identity, command executed and relevant violation information.
7 THE SPS_VCS CONFIGURATION TABLE
This table contains all the information the sps_vss.pm and sps_menu.pm programs need to run.
To create the control table, execute the create_table command using the following data definition (the sps_vcs.dd file. Note that you can create as many records you wish each uniquely identified by a Profile name.
organization: relative;
index : profile no_duplicates;
fields :
profile char (32) var,
logging_path char (256) var,
security bit (1),
break bit (1) default ('1'),
timeout bin (15) default ('-1'),
lams_input_q char (256) var,
exit_command char (256) var, initial_menu char (32) var,
menu_path char (256) var default
('sps_menu.table'),
menu_news char (256) var,
menu_notice char (32) var,
ready_mode bit (1),
execute_startup bit (1), clone_all_commands bit (1),
start_logging bit (1),
start_logging_path char (256) var default(''),
interval bin (15) default ('5'),
deltas_mode bit (1) default ('1'), auto_mode bit (1) default ('1');
end;
8 FIELD DEFINITIONS
profile
A unique name that identifies the record.
logging_path
The full path name of the log file. SPS will log the following every time the user executes a command:
date and time user name
the command that was executed security events if any
security
This switch is obsolete now.
break
When this switch is set VSS will allow the user to break out to the VOS command level. The system administrator can use this feature to restrict and audit users (reset to 0).
timeout
An inactivity timer specified in seconds; after which the user will be logged out.
lams_input_q
The path name of the AlertManager queue. It will be used to send events such as User login, logout and any security related events to Alert Manager. The default is
alert_manager>logs>sps_lams_input_q.
exit_command
9
The user may define a command that SPS will execute before returning to VOS. An example for using this feature is the ability to log out users as soon as they exit SPS.
initial_menu
The name of the initial Menu the user should start with. Used with sps_menu.pm.
menu_path
The full/relative path name of the Menu control table - sps_menu.table. Used with sps_menu.pm.
menu_news
This parameter is a pathname to any text file. The News File, if provided, will be displayed on the right margin of the screen. This feature may be useful to display special instructions or to indicate different processing environments like current module, terminal_name, user_name etc. Used with sps_menu.pm.
menu_notice
This is a free text that appear at the bottom of the menu. It can be used to indicate the name of the application or any other useful information. Used with sps_menu.pm.
ready_mode
Set this switch to start the Shell in "ready" mode, reset it to start in "shell" mode.
execute_startup
When this switch is set the system will execute the user's (home_dir)>start_up.cm command macro when the no_break and the clone_commands options are in use. There is some overhead (the start_up execution) when using this option.
clone_all_commands
When this switch is set the system will clone all secondary commands (sub-process). This will guarantee that the user will not be able to break out of the program. This works only if -
10
no_break is used. Using these feature may slow down the user and therefore not recommended.
start_logging
When this switch is set VSS will assure that both full read and write logging are set for the session. All terminal input and output will be captured. Log file is created based upon the value user specifies in start_logging_path switch. If the user doesn't specify the value of
start_logging_path, then the file is created automatically with the following naming conversion:
SPS>vos_security_shell>logs>[person_name]>[terminal-name]_[date]
In addition, it is possible to start and stop terminal logging as one would normally do while using the system. If the VSS start_logging is activated with the =start_logging field, then any
subsequent start/stop logging requests will produce log files in the user's home directory as follows:
(home_dir)>vss_logging.[date]_[time]
start_logging_path
User can specify the path name of the file to capture the terminal output as mentioned in the description of start_logging switch.
interval
An option specifying the interval, in seconds, at which SPS will update the screen in automatic mode. [Default: 5 seconds]
deltas_mode
A yes/no option. When set, SPS calculates and displays process meters based on the last interval. This feature applies only to process listings. In Deltas Mode values (cpu time, pf_time, I/O etc) will be calculated from the last time the screen displayed the last "interval".
auto_mode
11
A yes/no option. When set, SPS will start in Automatic mode. In Auto Mode, VSS will
automatically update the screen every "interval" seconds. See the -interval parameter and the Auto Mode Switch Shorthand Request. In this mode, SPS enables you monitor any change to the directory structure. For example, you can monitor the sizes (Sort = size) of *.out files as they are being created, removed or expanded in size.
12 THE REPORTS TABLE (VCS_REPORTS.TABLE)
The Reports Table is used to define frequently-used reports. Each report is identified with a unique logical name.
organization: relative;
index : report no_duplicates;
fields :
report char (32) var,
from char (32) var,
to char (32) var,
user char (65) var,
match char (256) var, output_path char (256) var, email char (256) var;
end;
report
A unique name that identifies the Report. To produce a report execute:
{sps_menu/sps_vss} -profile [Profile] -report [Report]
from
A standard-VOS data-time that define the time start date/time selection criteria.
to
A standard-VOS data-time that define the time end date/time selection criteria.
user
A standard user-id to match on.
match
If you choose a match-string, then only messages that contain the string will appear in the report.
13 output_path
The relative or full path name of the report file.
You can choose to send the report via your E-Mail Server to selected users. Simply enter their email nick-names as defined in the sps_email_server.table.
14 THE EXECUTE_PRIV_COMMAND.PM PROGRAM
PURPOSE
The execute_pri_command allows a non-privileged user access to pre-selected privileged commands. The programs verifies that the user is authorized to run the command then forwards it to Alert Manager for execution. Note that this feature will not work without AlertManager.
DISPLAY FORM
--- execute_priv_command --- command:
LINEAL FORM
execute_priv_command.pm [command]
ARGUMENTS
command
Any VOS command or analyze_system request. For every command you wish to give non- privileged users access to, you must create a file by that name and set the access-lists (acls) for all authorized users. The same rule applies to analyze_system commands. For example if you what to enable list_boards request, create a file by that name and set its acls for all authorized users.
15 USING THE SPS/BROWSER
The SPS/Browser may be called by a menu item. SPS/Browser is an extremely fast and friendly utility for displaying text and source files. You will find that using it is very productive and is a much better alternative for the VOS display command. The Browser is described later.
The Browser:
Is a full featured, PC-like text files browsing utility
Is used to examine reports, system logs, source code, command macros and any other type of text file
Allows all scrolling functions: down, up, left, right by page, line or column
Supports all common text scanning functions: forward/backward/repeat-last
Interfaces with VOS editors (edit,emacs) to provide editing capabilities to authorized users
May be used as a log file(s) processor: Internal Filters are designed to filter out unimportant information and pass on only important messages
Captures log messages while applications are still running (tail) Example:
/=menu_name Main
=text Display Daily Errors
=command sps_bro (master_disk)system>syserr_log.(date)
16 SECUIRING THE VSS AND MENU
Enabling registered user to be under VSS/Menu is just a start. To further secure the user activity, Security Officer needs to take care of other aspects as described below.
CHANGING AND PROTECTING THE USER'S START_UP.CM
set_user_shell.pm PURPOSE
The set_user_shell.pm command changes the user's start-up procedure so that one of the VOS command shells (VSS or Menu) will be started.
DISPLAY FORM
--- Set User Shell --- -user:
-program: vss -profile default LINEAL FORM
set_user_shell.pm [-user] [-program] [-profile]
ARGUMENTS
-user
The user-id or person-name of an existing user on the system.
-program
The program name as follows:
17
vss The VOS-Security-Shell program (sps_vss.pm) menu The Menu System program (sps_menu.pm) none No VOS command shell will be used.
-profile
A name of a profile defined in the sps_vcs.table.
PROTECTING YOUR AUDIT-TRAIL LOGS
We are being asked by VOS security auditors how they can protect the audit-trail reports that SPS creates and whether or not it is possible at all. Is it really possible to control what the SysAdmin or other "super-users" are doing on the system?
The answer is YES- all SPS modules can be easily protected and blocked from any unauthorized access. Please refer to the lock_SPS.cm command from the SPS directory. It is a great template describing how to set up the required permission to various SPS modules in a way that only the designated Security Officer has write/modify access, and all other users have only the bare minimum access required to use SPS modules.
SETTING VOS SECURITY
It is highly recommended that you take full advantage of all security related features that VOS offers. The following example would create a secure environment.
!set_password_security (current_module) -req_alpha_numeric &+
-forbid_repeat_password -forbid_vowels -forbid_repeating_chars &+
-forbid_user_name -forbid_frequent_changes -forbid_reverse &+
-forbid_anagram -forbid_begin_end_numeric
18
!login_admin -min_password_len 7 -password_exp_time 90 &+
-max_access_attempts 5 -max_bad_logins 5 -password_grace_time 18
!logout_admin -inactive_logout all -dialup_grace_time 15 -direct_grace_time 15
!audit_admin -format long
!audit_admin security -audit
!audit_admin admin -audit
!audit_admin configuration -audit
!audit_admin object -audit
!audit_admin access -audit
!audit_admin process -audit
19 SAMPLE REPORTS
Here is an example for a HTML-formatted report (click to view):
sps_audit_rep.html
20 THE MENU SYSTEM
The SPS/Menu system organizes applications into concise, professional and user friendly interfaces. Creating menus is a simple procedure; it takes minutes to complete thereby saving time and money and helping meet development deadlines. SPS/Menu requires no FMS work and no programming and therefore does not require any Stratus expertise.
The system greatly enhances system security by adjusting and generating menus on a per-user basis according to the individual's security profile.
The SPS/Menu System provides complete audit trail logs of all system and operator activities including security violation attempts detailing commands executed, user names and the time of execution.
FEATURES
Automatically generates box-type menus with unlimited chains of sub-menus.
Requires no programming or technical skills.
Integrates existing applications into professional looking, uniform and consistent interfaces.
Supports single-key transfers between applications.
Features the Security Layer
Offers additional facilities such as: Browser, Calendar and Disk Space.
Supports user programmable function keys for frequently used commands.
Produces a comprehensive audit log of all commands executed, users' identity, date and time of each event.
Provides a powerful file and report browsing facility.
Provides a configurable on-line help facility linking menu items to documentation files.
Reduces dramatically risk of human error, cost of documentation and training expenses.
SPS MENUS VS. COMMAND MACROS
There is a lot of added value in using the SPS solution compared with command macros. With minor effort (yes, we can help!) you can convert your macros into easy-to-maintain tables. SPS menus are all table driven, easy to maintain and generated dynamically ("on the fly") based on
21
user's security profile. In addition, SPS has many other features and tools such as a powerful file Browser, programmable function keys and more. In comparison, command macros are fixed for all users, require development and testing time, and lack many other features such as detailed audit trail reporting, on-line help and documentation.
Command Macros SPS Menus
Require development and testing All table driven, easy to maintain. Menus are generated dynamically ("on the fly")
Menus are fixed for everyone, no "on-the-fly"
adjustments and no built-in security
Adjustments of menus/sub-menus is based on user-id, time-of-day, terminal-name
Limited, difficult to follow traces. In many cases logging may be turned off by the operator
Robust, complete and easy to follow activity audit trail reports outlining date/time, user- name, command executed and any security violation
In many case, the user can find multiple ways
to "break out" Secure, bullet-proof "no-break" environment
Slow interface, may provide inconsistent presentation; no external or add-on tools
Consistent, user-friendly interface including, the powerful SPS/File Browser, SPS/Calendar,
"Hot Menus" and more
Function-keys are disabled Programmable function keys
No on-line documentation Allows on-line help/documentation for each
22
item or sub-menu
Command macro processing require system
resources Extremely fast, has no performance overhead
23 THE MENU CONTROL TABLE (SPS_MENU.TABLE)
This table contains all the information the sps_menu.pm program needs to run and successfully perform its function. To create the control table, execute the create_table command using the following data definition (the sps_menu.dd file):
Organization: relative;
Index: menu_name
duplicates;
fields:
menu_name char (32) var, text char (32) var, pause_sw bit (1) aligned, command char (256) var, arguments char (256) var, help_text char (75) var, help_text_file char (32) var, logging bit (1) aligned, sec_id char (32) var,
confirm_sw bit (1) aligned,
clone_command_sw bit (1) aligned, execute_startup_sw bit (1) aligned, allow_break_sw bit (1) aligned, notify_lams bit (1) aligned;
end;
FIELD DEFINITIONS
menu_name
The name of the menu. Make sure that the value of this field will be the same as the menu parameter given to the sps_menu.pm program when you are executing the menu. You may define up to 15 items per menu. Multiple menus may be defined in one table. The menu name will be used as the menu's headings.
This field is also used to program function keys. By default, function keys are used to execute items, for example, F2 will execute item #2 etc. To override this, define single-item menus where the menu_name is set to the function key (e.g. F1,F2..)
24
Example: To program F1 to execute the list_users command, define the following menu:
/=menu_name F1
=text List Users
=command list_users -interval 10 text
A short description of the item. This will be used to construct the menu's screen.
pause_sw
A switch telling the system whether to pause after executing the command or to immediately return to the menu. Set the pause_sw as follows:
1 - pause operation 0 - no pause operation command
The command to be executed when the operator selects an item on the menu. For information on how to set up automatic prompts that the menu will use as parameters, see Parameters Preprocessor.
agruments
A list of command arguments used to construct web-input forms.
Example:
/
=menu_name 'Operations Menu'
=text 'List Users with Args.'
=command 'list_users'
=arguments 'user_name,=*.* -full,cycle:yes/no
25
-admin,cycle:usage/page_faults/disk_io -process,=**.*'
It will produce the following form:
help_text
The help_text will appear on the terminal's 25th line every time the user tabs through the item.
You can give a more descriptive information on what the current item does.
help_text_file
A help text file may be displayed for additional information on the item. This could be used to set up daily memos and instructions as well as complete user's guide type of documents. To read the help file, press the "?" when positioned on the item. Documentation files must be plaed in the SPS>vos_command_shells>documentation directory.
logging
When this switch is set, the command will be executed in a Logging mode. In this mode all input and output to the screen will be recorded to the LOG file. This feature will very useful when executing sensitive operation type commands.
26 sec_id
Each item or menu may restricted by user-name. Each sec_id must have a corresponding file in the VCS directory on which you'll set standard VOS access-lists (acl) so that the program will be able to determine if the user is authorized to use it or not. When building the Menu Screen the program will not include items that the user is not allowed to use.
confirm_sw
When this switch is set, SPS will prompt the operator for confirmation before executing the command.
clone_command_sw
Set this switch for commands that may require the use of CTRL-BREAK or may otherwise be able to break out the SPS/Menu by using break-level.
execute_startup_sw
Used only for cloned commands. By default, the start_up.cm macro is NOT executed. This will speed things up but will require you to specify a full path name for the command. If this is not acceptable or you need to execute the start_up macro for any other reason, you may set this switch.
allow_break_sw
Used only for cloned commands.
notify_lams
Use this switch to record and create alerts within the SPS/Alert-Manager when important commands are executed.
27 DEFINING SUB-MENUS
You may define any number of sub-menus. It is recommended to have not more than three levels of menus.
Example:
/=menu_name Main
=text Goto Sub-Menu-1 =command sps_menu Sub-Menu-1
/** Sub-Menu-1 starts here.... */
/=menu_name Sub-Menu-1 =text Edit Abbreviations
=command edit (home_dir)>abbreviations
PREPROCESSING PARAMETERS
Some commands require the user to enter one or more arguments. For example, the update_channel_info command requires a device name as the first parameter. The system administrator can define the command line with the -form option so that the user will be able to enter the device name:
=menu_name Main
=text Update Channel Info
=command_line !update_channel_info -form
The problem with this method is that the menu will not be able to capture and log the device name that the users enters on the CRT form. Logging can also be misleading when the user
28
presses the Cancel-Key and does not execute the command. The log in this case will show:
!update_channel_info -form.
The Parameters Preprocessor solves these problems by composing a form and prompts the user for input before executing the command. By doing so, parameters will be captured and logged.
Here is how it works:
Preprocessor Parameters are encoded in the command_line field between two @ signs.
The Menu program scans the commands for these sequences, presents the user with a parsed (display) form and then inserts the user's input back into the command line.
The item's text field will be used as the form's headings and the text between the @ signs will be used as parameter labels.
All this is done before execution.
Example:
=menu_name Main
=text Update Channel Info
=command !update_channel_info @channel_name@ -reset
When the user selects the item, the Menu program will build and display the following form:
--- Update Channel Info --- -channel_name:
The user will be required to enter the channel name. The program will then insert the user's input into the command line and execute it as:
!update_channel_info [user's input] -reset.
29 SAMPLE CONFIGURATION
/******************************************************************/
/* Privileged Operator */
/******************************************************************/
/=menu_name Privileged Operator Menu =text List Users
=command list_users -full -admin -system =notify_lams 1
/=menu_name Privileged Operator Menu =text Analyze-System (who)
=command analyze_system -request_line who -quit =pause_sw 1
/=menu_name Privileged Operator Menu =text Check System Performance =command display_system_usage /=menu_name Privileged Operator Menu =text Send a Message
=command send_message *.* (unquote (quote @Message@)) -system -beep;
/=menu_name Privileged Operator Menu =text EMAIL from Stratus
=command send_email.cm -message (unquote (quote @Message@)) =help_text Send EMAIL using SPS-Email
30 THE SPS_MENU.PM PROGRAM
PURPOSE
The sps_menu.pm command initiates the SPS/Menu program.
DISPLAY FORM
--- SPS/Menu --- -profile:
-report:
LINEAL FORM
sps_menu.pm [-profile] [-report]
ARGUMENTS
-profile
The name of the Profile record as it appears in the sps_vcs configuration table.
-report
The name of the pre-defined report. See vcs_reports.table configuration table.
31 USING THE TERMINAL BASED MENU
The user can select a menu item by:
Tab, Return, Down keys next item
Back-Tab, Up key previous item
Go-To Up/Down keys first/last item
Pressing the number indicated for the item.
Press one of the items Quick-Keys.
Press the Function-Key indicated for the item.
On the left side of the Menu box, the system lists available requests:
? -- Shows the help text file that was defined for the item using the SPS/Browser.
! -- Displays the login session's information:
@ -- Displays the SPS/Calendar with access to daily memos. The Calendar program is documented later.
< -- Returns the user to the Main (root) Menu from any sub-menu
-- Cancels the Menu program and returns to VOS level. This request can be executed from any sub-menu without having to return to the Main Menu.
32
/ -- Lists all available function keys. Reprogramming function keys is explained in the beginning of this chapter.
33 USING THE WEB-BASED MENUS
Your configured menus can also be used via the WEB-Browser interface also known as VOS- Console or Alert-Manager. There are a few considerations when using this interface:
Commands are always executed as a sub-process (vs. interactive) by the AlertManager privileged server. This allows non-privileged users limited access to specific small set of privileged commands without having to register these users as privileged.
Audit trails will continue to register the user who executed the menu item(s).
The Browser interface does not support FMS-based applications or the -form option.
HOW TO USE
The user can switch from one menu to another by selecting a menu name from the Menu drop- down list.
The user can run any predefined report (see vcs_reports.tin) by selecting a report name from the Reports drop-down list.
The system-administrator can use a special Menu called Buttons as in the sample configuration.
Every item under the Buttons menu is turned into a button. Buttons are always available regardless of the current-menu and are used to execute frequently used commands.
34 THE VOS SECURITY SHELL
The SPS/VOS Security Shell eliminates unrestricted access to VOS and greatly enhances operators' and developers' productivity. Any operator, even with no Stratus experience, can become proficient and operate the system safely. The SPS/Security Shell is an indispensable environment for any mainframe trained personnel.
FEATURES
Incorporates the Security Layer shielding the system from unauthorized use.
Produces a comprehensive audit trail log of all commands executed on the system;
records the time and user's identity.
Keeps track of operator's activity and allows the user to restore and reuse commands and path names used previously during the session.
Features a standard DES-based file encryption facility.
Provides process listings (list_users) sorted by CPU utilization, I/O rate, Page faults memory usage and Interrupt rates.
Interfaces with other SPS tools: SPS/AlertManager, SPS/Browser, Tree, Calendar, Disk Space, SPS/Performance.
Supports user-programmable function keys for frequently used commands.
35 THE SPS_VSS.PM PROGRAM
sps_vss.pm PURPOSE
The command sps_vss.pm initiates and opens an audited user session. The program has two modes of operations called Ready & Shell. When the user starts VSS for the first time in shell mode , it will start the session by selecting all the files in the user's current directory. SPS will then display the Main Screen.
DISPLAY FORM
--- SPS/VSS --- Path:
Type: Files -sort: name -mode:
-profile: default -report
LINEAL FORM
sps_vss.pm [Path] [Type] [-sort] [-profile] [-report]
ARGUMENTS
Path/Match/User
When displaying directories, files or links, SPS uses this parameter as a star-name (e.g. *.pl1).
When displaying commands, include files or object modules, SPS uses this parameter as a match field. When displaying processes, SPS uses this parameter as a user_name mask (e.g.
*.SysAdmin).
Type
36 The type of objects VSS should display:
Files.
Directories.
Links.
Processes
Commands
Includes
Objects
In the case of command, includes, and object files, SPS will scan your library paths, find the object and display the objects' full path name. You can determine which include files your compiler picks-up or which objects are used by the bind command. These functions provide a faster and easier way of executing the VOS 'help -match and where_command commands. They provide a way of locating include files and object modules. SPS will scan all your library paths and will display all the files that match your Match string. You can then issue commands or ask SPS to give you the full path name of the object. For more information see the Where
Command Internal Command.
Select the required library path by cycling the Type field to Objects, Commands or Includes. The path name field will now be treated as a match string that SPS will use to extract the relevant files from your library paths. This works exactly like the -match parameter for the VOS help command.
When extracting commands (Type field = Commands), SPS will retrieve all internal commands that match your string as well as external commands.
-sort
An option to sort the objects before listing them:
name size
DT_modified DT_created DT_used DT_saved
37 organization
access author user_name priority cpu_time pf_time page_faults disk_reads disk_writes memory switches process_name program_name log_in_time -profile
The name of the Profile record as it appears in the sps_vcs configuration table.
-report
The name of the pre-defined report. See vcs_reports.table configuration table.
38 THE MAIN SCREEN
LISTING DIRECTORIES:
39 LISTING *TABLE FILES:
40 LISTING *TABLE FILES WITH INFO-MODE:
41 THE DIRECTORY TREE STRUCTURE:
42 WORKING WITH PROCESSES
LIST-USERS SORTED BY CPU USAGE:
43 LIST-USERS SORTED BY PAGE-FAULTS
LIST-USERS SORTED BY DISK-WRITES
44 SHORTHAND REQUESTS
The user executes Shorthand Requests by pressing the Shorthand-Key and then the letter key associated with the request. The following is the list of valid requests.
h- help
SPS displays the Help screen, to return the Main Screen, press Cancel.
t-top, goto_first_
page
When the display indicates that more than one page was found, this request will position the screen on the first page.
b-bottom, goto_last_
page
When the display indicates that more than one page was found, this request will position the screen on the last page available.
u-up, move_up_
directory
This request will move the current directory one level up. You can use this function again to continue moving up the directory tree. The request will result in the following: The path name will be changed to the directory name which is in the next upper level of the hierarchy.
p-process, start_a_
process
When the user executes this request, VS will build a temporary command macro including all the commands typed in the operations codes area and in the command line and start the command macro as a subprocess. VS checks the command status after every step. If any step fails, VS will notify the user by sending an error message to the terminal's 25th line identifying the command that failed and a system error message.
i-info, A toggle switch used to activate / deactivate the Information Mode. Use the
45 info_mode_
switch
Information Mode Switch Shorthand Request to enter/exit this mode. In this mode all information about the selected objects will be displayed. This is a much faster alternative for the display_file_status, list -links,
where_command commands and more. To enter the Information Mode, position the cursor next to the object you are interested in and issue the shorthand request. The marked object name's status/information will be displayed on the right-hand side of the screen. If you have not positioned the cursor, the first displayed object will be selected. While tabbing or moving the cursor up or down in the Operation Codes Area, VS will automatically display the information for the next/previous object.
a-auto, auto_mode_
switch
A toggle switch used to activate / deactivate the Auto Mode.
d-deltas, deltas_mode_
switch
A toggle switch used to activate / deactivate the Deltas Mode. In this mode, VS calculates process(es) meters based on the current interval.
+Next disk
SPS changes the current disk name (e.g. #d01) to the next disk-name on the system.
-Prev disk
SPS changes the current disk name (e.g #d01) to the previous disk-name on the system.
g-global, global_
command --- SPS - Global Command. ---
46 Command...:
Function..: execute
This feature enables executing a command on multiple marked files. The command in this case is typed once. Marking files is done by using the Mark Key. After marking file(s), issue the Global Command Shorthand request. You can cycle the FUNCTION field to choose from:
execute on-line execution
execute_and_display_form on-line execution with the -form option start_process: create a sub-process
o-out_file, display_
output
Using this request will enable you the browse the output file that the last process that VS started had created. Browsing is allowed while the subprocess is still running. For more information see the SPS/Browser.
s-save, save_path_
name
The user may save, change, delete or edit path names as part of the SPS configuration. Saved Path names are used for quick directory navigation. The following screen will appear:
--- SPS - Save Path Name --- Abbreviation:
Type: Processes Path: *.*
Func: write
47 Explanation:
Abbreviation: A short alias for the path name.
Type: Specify Files/Directories/Links/Processes.
Path: The path name SPS should save.
-Func: Specify write / rewrite / delete or edit_configuration.
Note that the Type field can be cycled to be spaces. In this case, whenever you use the abbreviation to change the path name, SPS will not change the value in the Type field.
e-expand, expand_path
When issuing this request, VS will expand (reread) the current directory structure and update the screen if any changes were found.
*-all,
change_to_all
When displaying files, the request will change the star name to
(current_dir)>*. When displaying processes SPS will change the user's mask to *.*.
c-clean, clean_
operation_
codes
This request will erase any commands from the operations codes area.
c-configure, cofigure_sps
Will bring up the SPS Configuration Screen. See "System Configuration" for more details.
a-abbrev., add_
The request enables adding abbreviations to the user's (home_dir)
>abbreviations file. SPS will call the edit command, the user will make
48
abbrev changes to the abbreviations file, save the file and exit the editor. SPS will activate the new abbreviations file.
p-print, print_screen
Sends the current screen image to the local printer.
t-tree,
directory_tree
SPS starts the SPS/Tree program. The root directory is the user's current_dir directory.
r-ready, ready_mode
This request will take the user out of the Shell Mode and start operating in the Ready Mode. In this mode there is no screen-driven interface and the user executes commands as if the process was working directly under VOS.
E-error, display_
syserr_log
This command allows to browse the daily VOS error log. VOS error logs are placed under the (master_disk)>system directory. For more information see:
The SPS/Browser.
#-Calendar, sps_calendar
Start the SPS / Calendar program.
CANCEL-KEY To exit any SPS screen use the standard Cancel-Key.
49 DIRECTORY NAVIGATION
SPS expands the input in the path name field to a full valid star name by executing the following steps:
SPS special commands (move-up, move down requests, cycle) SPS-Saved Path Names (see configuration)
Stratus functions (e.g., (current_dir)>* or (home_dir)>*) Relative path names (e.g., <<*.pl1)
Abbreviations defined in you process' abbreviation file.
Move Up/Down
To move the current directory up one level in the directory hierarchy tree use the Move Up Dir Shorthand Request. To move the current directory down one level in the directory hierarchy tree use the Select Dir Internal Command. Put the sign (default is '>') next to the directory name you wish to go down to and press the Enter key. VS will then:
Change the path name to the selected directory name.
Change your current directory to the new one.
List all directories under the new current_dir.
If the new directory has no subdirectories, SPS will automatically change the Type field to Files and will list the names of the files under the selected directory.
Cycle / Cycle-Back
SPS keeps track of the last twenty path names and the Type field associated with them. Use the Cycle or the Cycle-Back keys to cycle through the paths list until the desired path name is displayed. Press the Enter key to view the objects list. This feature is particularly useful when you need to switch back and forth from one directory to another.
50 Using
Saved Paths
Using Saved Path names is easiest and fastest way to navigate between the directories. Type the abbreviation and SPS will replace it with the saved path name and retrieve the objects. It is recommended that you define abbreviations for the directories that are often used. Up to 100 abbreviations can be defined in SPS. For more details see the explanation on the Save Path Name Shorthand Request.
The Directory Tree
SPS-TREE is a built-in program that will give you a tree-like graphic presentation of your directory structure. The root directory for the TREE program will always be your current directory. The user can page up and down, move the pointer to any directory and then change your current_directory by pressing the Enter key.
EXECUTING COMMANDS
Commands are entered in the Command Line field and/or the Operations Codes Area next to the object names. Commands can be executed in the foreground with or without the -form option or started as subprocesses. (Refer to the explanation of "Subprocesses.")
OPERATION CODES AREA
Position the cursor next to the object name, type any command and press the Enter key. You can use any command or an abbreviation as defined in your abbreviation file. (e.g e-edit, d- display).
You can enter up to 38 commands at one time. The commands are executed in the same order in which the objects are displayed.
If you want a command to be executed with the -form option, press the display-form key. The marked commands will be displayed in reverse video and will be executed with the -form option.
The insert-saved key can be used to insert the last entered command. Saving is done
automatically as you type. SPS will echo to the screen the command and the file name as they
51
are being executed. After the completion of execution you will be prompted to press the Enter key to return to SPS or if you wish, you can press any key to cancel out of SPS. If the command name is longer than five characters or if you want to execute the same command on many files, use the Global Command Shorthand Request.
INTERNAL COMMANDS
There are nine Internal Commands handled by SPS. The default values can be changed through the configuration procedures. These commands are used in the Operations CodesArea. The Internal Commands are:
> - Select Directory
When displaying directories, position the cursor next to any directory, type the select_directory sign and press Enter. VS will then take you down to the
selected directory. For more information see the See explanation under Move Up/Down requests.
* - Generic Command
Use the Generic Command if you do not have enough room to enter a command. SPS will display the object name selected and will prompt you to enter the required command. It is also useful to use this command if you want to perform more than one operation on a single object. All you have to do is enter the number of required operations next to the '*' command.
x - Execute Command
Use this command to execute any command macro (.cm) or program module (.pm) files.
xf - Execute Command with -form
Works exactly like execute command but in addition it displays the command's CRT form before executing it.
? - Where Using this command will give information such as which include files your compiler picks up or which objects are used by the bind command etc. When
52
Command listing Commands / Objects / Includes use this command to display the full path of the object.
v-Browse Command
Evokes the SPS/Browser program.
s-Stop Process Stops the marked process(es).
deb-Debug Process
When listing processes use this command to start the mp_debug program. SPS will issue the following commands for you and put you in debug mode.
include_process [selected process]
use_process 1 suspend_process 1 trace
p - Process Priority
When listing processes use this command to set / reset priorities.
Example:
To set priority to 3 enter 'p3' next to the process name and press the Enter.
53 THE COMMAND LINE
Use the Command Line field to submit any command. To do so, tab the cursor to the Command Line field, type a command and press the Enter key. To execute the command with the -form option, press the display-form key. SPS will execute the command and return to the main screen.
Cycle Last Used Commands:
SPS remembers the last five commands that were entered from the Command Line field. To retrieve previously entered commands tab to the Command Line field and press the Cycle or Cycle-Back keys to cycle to the required command, then press the Enter key to execute the command.
THE GLOBAL COMMAND
Use this command to execute a command on multiple files. Use the Mark key to mark the files then issue the Global Command Shorthand Request to evoke the Global Command (see the shorthand's description).
PROGRAMMED FUNCTION KEYS
The user can program and assign commands to the first 10 Function Keys (F1 to F10) as part of the VS configuration. Execute the System Configuration Shorthand Request and define the commands for each Function Key. (see System Configuration). Once your functions have been defined, evoke the command by pressing the Function Key.
STARTING A SUB-PROCESS
Starting sub-processes allows you to continue your work (the terminal will be available) while the sub-processes are running in the background. Type the commands and then use the Start Process Shorthand to start a sub-process. SPS creates and starts another process to perform your commands, it will clear the Operation Codes Area and will notify you that the sub-process
54
has started. SPS will also send notifications in case one of your command(s) did not complete successfully. You will get a message with the command that failed and the system's error message (e.g., 'pl1 acct.pl1- Translation had errors').
Displaying the Process Output File:
Once you have invoked a background process with SPS you can use the Display Last Out File shorthand Request to display and examine the contents of the output file created by that process.
You can do this without having to change your current directory. You will be able to watch the
*out file while(!) it is being written in the Follow Mode. SPS output files are created in your (process_dir) and are named as follows: sps_proc_(date)_(time).out. For more details see the SPS Browse documentation.
SYSTEM CONFIGURATION
SPS maintains the user's setup in a small file under the user's home directory. To change or to add information to the SPS configuration use the Configure SPS Shorthand Request. The following CRT form will appear:
--- SPS - System Configuration. --- Function..: function_keys
YOU CAN CYCLE THE FUNCTION FIELD TO CHOO SE FROM:
Function Keys
--- SPS - Function Keys. --- F1..:
F2..:
55 F3..:
F4..:
F5..:
F6..:
F7..:
F8..:
F9..:
F10.:
Type the commands that you want to be executed for the function keys and press the Enter key to complete the definition process.
Omit Files Star
Names --- SPS - Omit Selection. --- Mask1..:
Mask2..:
Mask3..:
Mask4..:
Mask5..:
Mask6..:
Mask7..:
56 Mask8..:
Mask9..:
Mask10.:
Type the file masks (e.g., *.backup) and press the Enter key to complete the definition process.
Internal
Commands --- SPS - Preferences --- Select_directory: >
Execute_command: x Execute_and_display_form: xf Where_command: ? Browse_command: v Stop_process: s Debug_process: deb Set_process_priority: p Execute_LONG_command: * position_on: Path_Name -reset_to_current_dir: no
editor: !edit
57
Change the information and press the Enter key to complete the definition process.
