Part II Security for the User
| | |
| ||
| ||
The chapters in this part describe the following topics:
Password use (“Using the System Responsibly”)
Login and logout processes (“Using the System Responsibly”)
Security profiles of subjects and objects (“Protecting Data”)
Object protection mechanisms (“Protecting Data”)
Characteristics of object classes (“Descriptions of Object Classes”)
Table of Contents
- 3 Using the System Responsibly
- Choosing a Password for Your Account
- Knowing What Type of Password to Use
- Password Requirements for Different Types of Accounts
- Types of Logins and Login Classes
- Login Failures: When You Are Unable to Log In
- Changing Your Password
- Password and Account Expiration Times
- Guidelines for Protecting Your Password
- Network Security Considerations
- Auditing Access to Your Account and Files
- Logging Out Without Compromising System Security
- Checklist for Contributing to System Security
- 4 Protecting Data
- Contents of a User's Security Profile
- Security Profile of Objects
- Displaying a Security Profile
- Modifying a Security Profile
- Specifying an Object's Class
- Access Required to Modify a Profile
- How the System Determines if a User Can Access a Protected Object
- Controlling Access with ACLs
- Using Identifier Access Control Entries (ACEs)
- Granting Access to Particular Users
- Preventing Users from Accessing an Object
- Limiting Access to a Device
- Limiting Access to an Environment
- Ordering ACEs Within a List
- Establishing an Inheritance Scheme for Files
- Displaying ACLs
- Adding ACEs to an Existing ACL
- Deleting an ACL
- Deleting ACEs from an ACL
- Replacing Part of an ACL
- Restoring a File's Default ACL
- Copying an ACL
- Controlling Access with Protection Codes
- Understanding Privileges and Control Access
- Auditing Protected Objects
- 5 Descriptions of Object Classes