IBM 8687 Installation Guide - Page 186

Specify here how often you want Process Control to check for new processes and apply the process alias rules. Figure 5-45 Process Control scan interval The other configurable entry, Request timeout interval, is used to determine how long the service will wait for commands from a remote server. If the timeout value is exceeded, control will pass back to the local console. Breakaway OK This parameter is to allow a child process to break away from the process group. If this box is not checked, a child process that tries to break away from the group will not be permitted to execute. This will prevent processes from creating other processes that are not managed under the group's rules. This may prevent the spread of Trojan horse viruses that enter a system attached to other processes and then attempt to run as services, or under another user's credentials. Process Control enables a very strict security method. It is possible to grant execution privileges only to specific subdirectories. Make sure these rules are moved to the top of the list of execution rules, because the rules are parsed in top-down order. Then create a rule for subdirectory names that match * and apply a process count of 0. This will prevent all processes that are initiated from any other subdirectories from executing. 172 IBM ^ xSeries 440 Planning and Installation Guide