1 PFILE
 PFILE allows a user possessing CMKRNL to limit access to a  file
 based upon processor access mode.  Normal file protection checks
 must succeed before access mode protection is even examined.

 Format:
         PFILE file[,...]

2 Parameters

 file[,...]

 One or more file  specifications  indicating  what  files  PFILE
 should operate upon.  Full wildcarding is allowed.

2 Access_modes

 The access-mode keyword required for the access-type  qualifiers
 must be one of the following:


      o  USER
         Least privileged access mode; what normal user  programs
         execute at.  This is the access mode to which all access
         types default upon file creation.

      o  SUPERVISOR
         Command language interpreters (e.g., DCL,  MCR)  run  in
         supervisor mode.

      o  EXECUTIVE
         Record  management  services  (RMS)  and   some   system
         services  run  in executive mode.  Since almost all file
         accessing is done via RMS, having the access mask  on  a
         file  be  any  of  these  first  three  modes  makes  it
         essentially unprotected.

      o  KERNEL
         Special system  programs  and  system  services  run  in
         kernel  mode.   Preventing  access  at lower than kernel
         mode requires that  a  special  program  be  written  to
         access the file in this highest processor mode.


2 Command_Qualifiers
/READ

 /READ=mode

 Indicates that users attempting to access a protected  file  for
 READ must be running in the specified access mode or higher.

/WRITE

 /WRITE=mode

 Indicates that users attempting to access a protected  file  for
 WRITE must be running in the specified access mode or higher.

/EXECUTE

 /EXECUTE=mode

 Indicates that users attempting to access a protected  file  for
 EXECUTE must be running in the specified access mode or higher.

/DELETE

 /DELETE=mode

 Indicates that users attempting to access a protected  file  for
 DELETE must be running in the specified access mode or higher.

/LOG

 /LOG
 /NOLOG (D)

 Indicates whether or not PFILE should display the name  and  new
 protection of each file it processes.
