Filter
Top Products
172 IBM ^ xSeries 440 Planning and Installation Guide
Figure 5-45 Process Control scan interval
The other configurable entry, Request timeout interval, is used to determine
how long the service will wait for commands from a remote server. If the
timeout value is exceeded, control will pass back to the local console.
Breakaway OK
This parameter is to allow a child process to break away from the process
group. If this box is not checked, a child process that tries to break away from
the group will not be permitted to execute. This will prevent processes from
creating other processes that are not managed under the group’s rules.
This may prevent the spread of Trojan horse viruses that enter a system
attached to other processes and then attempt to run as services, or under
another user’s credentials.
Process Control enables a very strict security method. It is possible to grant
execution privileges only to specific subdirectories. Make sure these rules are
moved to the top of the list of execution rules, because the rules are parsed in
top-down order. Then create a rule for subdirectory names that match * and
apply a process count of 0. This will prevent all processes that are initiated from
any other subdirectories from executing.
Specify here how often
you want Process
Control to check for new
processes and apply the
process alias rules.