HP OpenVMS Guide to System Security
» Table of Contents |  | | » Glossary | | | » Index | | |
| | |
| ||
| ||
HP Part Number: AA-Q2HLG-TE
September 2003
© Copyright 2003 Hewlett-Packard Development Company, L.P.
Table of Contents
- Preface
- I Security Overview
- II Security for the User
- 3 Using the System Responsibly
- Choosing a Password for Your Account
- Knowing What Type of Password to Use
- Password Requirements for Different Types of Accounts
- Types of Logins and Login Classes
- Login Failures: When You Are Unable to Log In
- Changing Your Password
- Password and Account Expiration Times
- Guidelines for Protecting Your Password
- Network Security Considerations
- Auditing Access to Your Account and Files
- Logging Out Without Compromising System Security
- Checklist for Contributing to System Security
- 4 Protecting Data
- Contents of a User's Security Profile
- Security Profile of Objects
- How the System Determines If a User Can Access a Protected Object
- Controlling Access with ACLs
- Using Identifier Access Control Entries (ACEs)
- Granting Access to Particular Users
- Preventing Users from Accessing an Object
- Limiting Access to a Device
- Limiting Access to an Environment
- Ordering ACEs Within a List
- Establishing an Inheritance Scheme for Files
- Displaying ACLs
- Adding ACEs to an Existing ACL
- Deleting an ACL
- Deleting ACEs from an ACL
- Replacing Part of an ACL
- Restoring a File's Default ACL
- Copying an ACL
- Controlling Access with Protection Codes
- Understanding Privileges and Control Access
- Auditing Protected Objects
- 5 Descriptions of Object Classes
- III Security for the System Administrator
- 6 Managing the System and Its Data
- 7 Managing System Access
- Defining Times and Conditions for System Access
- Assigning Appropriate Accounts to Users
- Using Passwords to Control System Access
- Enabling External Authentication
- Overriding External Authentication
- Impact on Layered Products and Applications
- Setting a New Password
- Case Sensitivity in Passwords and User Names
- User Name Mapping and Password Verification
- Password Synchronization
- Specifying the SYS$SINGLE_SIGNON Logical Name Bits
- Authentication and Credentials Management Extensions (ACME) Subsystem
- Controlling the Login Process
- 8 Controlling Access to System Data and Resources
- 9 Security Auditing
- Overview of the Auditing Process
- Reporting Security-Relevant Events
- Developing an Auditing Plan
- Methods of Capturing Event Messages
- Analyzing a Log File
- Managing the Auditing Subsystem
- Tasks Performed by the Audit Server
- Disabling and Reenabling Startup of the Audit Server
- Changing the Point in Startup When the Operating System Initiates Auditing
- Choosing the Number of Outstanding Messages That Trigger Process Suspension
- Reacting to Insufficient Memory
- Maintaining the Accuracy of Message Time-Stamping
- Adjusting the Transfer of Messages to Disk
- Allocating Disk Space for the Audit Log File
- Error Handling in the Auditing Facility
- 10 System Security Breaches
- 11 Securing a Cluster
- 12 Security in a Network Environment
- 13 Using Protected Subsystems
- A Assigning Privileges
- ACNT Privilege (Devour)
- ALLSPOOL Privilege (Devour)
- ALTPRI Privilege (System)
- AUDIT Privilege (System)
- BUGCHK Privilege (Devour)
- BYPASS Privilege (All)
- CMEXEC Privilege (All)
- CMKRNL Privilege (All)
- DIAGNOSE Privilege (Objects)
- DOWNGRADE Privilege (All)
- EXQUOTA Privilege (Devour)
- GROUP Privilege (Group)
- GRPNAM Privilege (Devour)
- GRPPRV Privilege (Group)
- IMPERSONATE Privilege (All) (Formerly DETACH)
- IMPORT Privilege (Objects)
- LOG_IO Privilege (All)
- MOUNT Privilege (Normal)
- NETMBX Privilege (Normal)
- OPER Privilege (System)
- PFNMAP Privilege (All)
- PHY_IO Privilege (All)
- PRMCEB Privilege (Devour)
- PRMGBL Privilege (Devour)
- PRMMBX Privilege (Devour)
- PSWAPM Privilege (System)
- READALL Privilege (Objects)
- SECURITY Privilege (System)
- SETPRV Privilege (All)
- SHARE Privilege (All)
- SHMEM Privilege (Devour)
- SYSGBL Privilege (Files)
- SYSLCK Privilege (System)
- SYSNAM Privilege (All)
- SYSPRV Privilege (All)
- TMPMBX Privilege (Normal)
- UPGRADE Privilege (All)
- VOLPRO Privilege (Objects)
- WORLD Privilege (System)
- B Protection for OpenVMS System Files
- C Running an OpenVMS System in a C2 Environment
- D Alarm Messages
- Glossary
- Index
List of Figures
- 2-1 Reference Monitor
- 2-2 Authorization Access Matrix
- 2-3 Authorization Access Matrix with Labeled Cross-Points
- 4-1 Previous Per-Thread Security Model
- 4-2 Per-Thread Security Profile Model
- 4-3 Flowchart of Access Request Evaluation
- 4-4 Flowchart of Access Request Evaluation (cont’d)
- 4-5 Flowchart of Access Request Evaluation (cont’d)
- 4-6 Flowchart of Access Request Evaluation (cont’d)
- 4-7 Flowchart of Access Request Evaluation (cont’d)
- 8-1 Flowchart of File Creation
- 8-2 Flowchart of File Creation
- 8-3 Flowchart of File Creation
- 8-4 Security Class Object
- 12-1 The Reference Monitor in a Network
- 12-2 A Typical Dynamic Asynchronous Connection
- 13-1 How Protected Subsystems Differ from Normal Access Control
- 13-2 Directory Structure of the Taylor Company's Subsystem
List of Tables
- 1-1 Event Tolerance as a Measure of Security Requirements
- 2-1 Objects Protected by Security Controls
- 2-2 Security Auditing Overview
- 3-1 Secure and Insecure Passwords
- 3-2 Types of Passwords
- 3-3 Reasons for Login Failure
- 4-1 Major Types of Rights Identifiers
- 4-2 Classes of Protected Objects
- 6-1 Example of a Site Security Policy
- 7-1 Authorize Qualifiers Controlling Login Times and Conditions
- 7-2 Login Qualifiers Not Allowed by Captive Accounts
- 7-3 Qualifiers Required to Define Captive Accounts
- 7-4 Defaults for Password History List
- 7-5 SYS$SINGLE_SIGNON Logical Name Bits
- 7-6 Intrusion Example
- 7-7 Parameters for Controlling Login Attempts
- 8-1 Employee Grouping by Department and Function
- 8-2 OpenVMS Privileges
- 8-3 Minimum Privileges for System Users
- 8-4 DCL Commands Used to Protect Files
- 9-1 Event Classes Audited by Default
- 9-2 Access Control Entries (ACEs) for Security Auditing
- 9-3 Kinds of Security Events the System Can Report
- 9-4 Events to Monitor Depending on a Site's Security Requirements
- 9-5 Characteristics of the Audit Log File
- 9-6 Qualifiers for the Audit Analysis Utility
- 9-7 Controlling the Flow of Audit Event Messages
- 10-1 System Files Benefiting from ACL-Based Auditing
- 11-1 System Files That Must Be Common in a Cluster
- 11-2 System Files Recommended to Be Common
- 11-3 Using Multiple Versions of Required Cluster Files
- 11-4 Fields in SYSUAF.DAT Requiring Synchronization
- 11-5 Summary of Object Behavior in a Cluster
- 12-1 AUTHORIZE Commands for Managing Network Proxy Access
- 12-2 Network Object Defaults
- B-1 Exceptions to Standard OpenVMS System File Protection
- C-1 Software Not Included in the C2-Evaluated System
- C-2 Privileges for Untrusted Users
List of Examples
- 3-1 Local Login Messages
- 4-1 Authorized Versus Default Process Privileges
- 6-1 Sample Security Administrator's Account
- 7-1 Creating a Typical Interactive User Account
- 7-2 Creating a Limited-Access Account
- 7-3 Sample Captive Procedure for Privileged Accounts
- 7-4 Sample Captive Command Procedure for Unprivileged Accounts
- 7-5 Intrusion Database Display
- 9-1 Sample Alarm Message
- 9-2 Audit Generated by an Object Access Event
- 9-3 Auditing Events for a Site with Moderate Security Requirements
- 9-4 Brief Audit Report
- 9-5 One Record from a Full Audit Report
- 9-6 Summary of Events in an Audit Log File
- 9-7 Identifying Suspicious Activity in the Audit Report
- 9-8 Scrutinizing a Suspicious Record
- 9-9 Default Characteristics of the Audit Server
- 12-1 Sample Proxy Account
- 12-2 UAF Record for MAIL$SERVER Account
- 12-3 Sample Commands for a Dynamic Asynchronous Connection
- 12-4 Protected File Sharing in a Network
- 13-1 Setting Up Identifiers and Application Access for Managing Membership List
- 13-2 Protection of SUPPLIERS_SUBSYSTEM.DIR
- 13-3 Protection of SYS$SYSDEVICE:[SUPPLIERS_SUBSYSTEM]
- 13-4 Access to Subsystem's Images ORDERS.EXE and PAYMENTS.EXE
- 13-5 Queue Protection
- 13-6 Subsystem Command Procedure
- B-1 Files in SYS$KEYMAP
- B-2 Files in SYS$LDR
- B-3 Files in SYS$STARTUP and SYS$ERR
- B-4 Files in SYSEXE
- B-5 Files in SYSHLP
- B-6 Files in SYSLIB
- B-7 Files in SYSMGR
- B-8 Files in SYSMSG
- B-9 Files in SYSTEST
- B-10 Files in SYSUPD
- B-11 Files in VUE$LIBRARY