Establishes the default protection for files created by the current process.

Format

SET PROTECTION [=(code)]/DEFAULT

Parameter

code

Specifies the category of protection to be assigned by default to all files subsequently created by the current process. To override this protection, you must specify an explicit protection using either the SET SECURITY /PROTECTION command or the /PROTECTION qualifier on the CREATE command. If you do not specify a protection code, the current default remains unchanged.

The protection code is made up of the following components:

• Ownership category---system (S), owner (O), group (G), or world (W). Each category can be abbreviated to its first character.
• Access category---Read (R), write (W), execute (E), or delete (D). The access category is assigned to each ownership category. A null access specification means no access.

Note Use the SET SECURITY/PROTECTION command to reset security characteristics of the directory or file.

Example

$ SET PROTECTION=(GROUP:RWED,WORLD:R)/DEFAULT
      

The SET PROTECTION/DEFAULT command in this example sets the default protection to grant unlimited access to other users in the same group and read (R) access to all users. The default protections for system and owner are not changed.