secinfo & reginfo Gateway Security Files

secinfo

The secinfo security file is used to prevent unauthorized launching of external programs. You can define the file path using profile parameters gw/sec_info in RZ10. The default value is:

gw/sec_info = $(DIR_DATA)/secinfo

reginfo

File reginfo controls the registration of external programs in the gateway. You can define the file path using profile parameters gw/reg_info. The default value is:

gw/reg_info = $(DIR_DATA)/reginfo

When the gateway is started, it rereads both security files. You can make dynamic changes by changing, adding, or deleting entries in the reginfo file. Then the file can be immediately activated by reloading the security files. Please noted that if one of the files has no entries or its syntax is incorrect, the gateway closes down.

Maintaining the Security Files

You can edit the files in the following ways:

• Use the gateway monitor in AS ABAP (transaction SMGW).
• Use an editor, and edit the files at operating system level.

You must keep precisely to the syntax of the files, which is described below. There are two different versions of the syntax for both files: Syntax version 1 does not enable programs to be explicitly forbidden from being started or registered. For this reason, as an alternative you can work with syntax version 2, which complies with the route permission table of the SAProuter. If you want to use this syntax, the whole file must be structured accordingly and the first line must contain the entry #VERSION=2 (written precisely in this format).

Once you have completed the change, you can reload the files without having to restart the gateway. To do this, in the gateway monitor (transaction SMGW) choose Goto > Expert Functions > External Security > Reread.