Part III Security for the System Administrator
| | |
| ||
| ||
The chapters in this part discuss the following topics:
Role of a security administrator (“Managing the System and its Data”)
Securing the system (“Managing System Access”)
Securing data and resources (“Controlling Access to System Data and Resources”)
Using encryption (“Using Encryption”)
Security auditing (“Security Auditing”)
Responding to security breaches (“System Security Breaches”)
Creating a secure cluster (“Securing a Cluster”)
Considerations for networked systems (“Security in a Network Environment”)
Setup and management of protected subsystems (“Using Protected Subsystems”)
This part of the manual also includes information on the following topics:
User privileges and who may need them (“Assigning Privileges”)
Default UIC-based protection of critical system files (“Protection for OpenVMS System Files”)
Examples of security alarm messages (“Alarm Messages”)
Table of Contents
- 6 Managing the System and its Data
- 7 Managing System Access
- Defining Times and Conditions for System Access
- Assigning Appropriate Accounts to Users
- Using Passwords to Control System Access
- Enabling External Authentication
- Overriding External Authentication
- Impact on Layered Products and Applications
- Setting a New Password
- Case Sensitivity in Passwords and User Names
- User Name Mapping and Password Verification
- Password Synchronization
- Specifying the SYS$SINGLE_SIGNON Logical Name Bits
- Authentication and Credentials Management Extensions (ACME) Subsystem
- Controlling the Login Process
- 8 Controlling Access to System Data and Resources
- 9 Using Encryption
- 10 Security Auditing
- Overview of the Auditing Process
- Reporting Security-Relevant Events
- Developing an Auditing Plan
- Methods of Capturing Event Messages
- Analyzing a Log File
- Managing the Auditing Subsystem
- Tasks Performed by the Audit Server
- Disabling and Reenabling Startup of the Audit Server
- Changing the Point in Startup When the Operating System Initiates Auditing
- Choosing the Number of Outstanding Messages That Trigger Process Suspension
- Reacting to Insufficient Memory
- Maintaining the Accuracy of Message Time-Stamping
- Adjusting the Transfer of Messages to Disk
- Allocating Disk Space for the Audit Log File
- Error Handling in the Auditing Facility
- 11 System Security Breaches
- 12 Securing a Cluster
- 13 Security in a Network Environment
- 14 Using Protected Subsystems
- A Assigning Privileges
- ACNT Privilege (Devour)
- ALLSPOOL Privilege (Devour)
- ALTPRI Privilege (System)
- AUDIT Privilege (System)
- BUGCHK Privilege (Devour)
- BYPASS Privilege (All)
- CMEXEC Privilege (All)
- CMKRNL Privilege (All)
- DIAGNOSE Privilege (Objects)
- DOWNGRADE Privilege (All)
- EXQUOTA Privilege (Devour)
- GROUP Privilege (Group)
- GRPNAM Privilege (Devour)
- GRPPRV Privilege (Group)
- IMPERSONATE Privilege (All) (Formerly DETACH)
- IMPORT Privilege (Objects)
- LOG_IO Privilege (All)
- MOUNT Privilege (Normal)
- NETMBX Privilege (Normal)
- OPER Privilege (System)
- PFNMAP Privilege (All)
- PHY_IO Privilege (All)
- PRMCEB Privilege (Devour)
- PRMGBL Privilege (Devour)
- PRMMBX Privilege (Devour)
- PSWAPM Privilege (System)
- READALL Privilege (Objects)
- SECURITY Privilege (System)
- SETPRV Privilege (All)
- SHARE Privilege (All)
- SHMEM Privilege (Devour)
- SYSGBL Privilege (Files)
- SYSLCK Privilege (System)
- SYSNAM Privilege (All)
- SYSPRV Privilege (All)
- TMPMBX Privilege (Normal)
- UPGRADE Privilege (All)
- VOLPRO Privilege (Objects)
- WORLD Privilege (System)
- B Protection for OpenVMS System Files
- C Alarm Messages