Standard Ownership and Protection
   
   
   
   
 
 
 
 
 
 
 
 
 
  
  
   
 
  
 
 
    
      HP OpenVMS Guide to System Security: OpenVMS Version 8.4  >  Appendix B Protection for OpenVMS System Files  
       
      
       Standard Ownership and Protection
       
      
      
       The system (SYSTEM) owns all OpenVMS system files
except one. The directory MOM$SYSTEM is owned by UIC [376,375]. 
 All files in SYS$SYSDEVICE:[VMS$COMMON], except
those listed in “Exceptions to Standard OpenVMS System File Protection” , have a protection code of S:RWED,O:RWED,G:RWED,W:RE. 
 The directory VMS$COMMON.DIR and the files in
SYS$SYSDEVICE:[SYSx .DIR] have a protection code
of S:RWE,O:RWE,G:RE,W:RE. 
For SYSUAF.DAT, RIGHTSLIST.DAT, and VMS$PASSWORD_HISTORY.DATA,
the file owner must be a UIC with a group within the system range
(less than MAXSYSGROUP system parameter). Values of [1,1] or [SYSTEM]
(1,4) are recommended.
Table B-1 Exceptions to Standard OpenVMS System File Protection 
Files  Protection [VMS$COMMON ] DECW$DEFAULTS.DIR MOM$SYSTEM.DIR S:RWE,O:RWE,G:RE,W:RE SYS$KEYMAP.DIR SYS$LDR.DIR   SYS$STARTUP.DIR SYSCBI.DIR   SYSERR.DIR SYSEXE.DIR   SYSFONT.DIR SYSHLP.DIR   SYSLIB.DIR SYSMAINT.DIR   SYSMGR.DIR SYSMSG.DIR   SYSTEST.DIR SYSUPD.DIR   VUE$LIBRARY.DIR     [VMS$COMMON.SYS$KEYMAP] DECW.DIR   S:RWE,O:RWE,G:RE,W:RE [VMS$COMMON.SYS$KEYMAP.DECW] SYSTEM.DIR USER.DIR S:RWE,O:RWE,G:RE,W:RE [VMS$COMMON.SYSEXE] ISL_LVAX_061.SYS ISL_SVAX_061.SYS S:RWED,O:RWED,G:RE,W:RE NETPROXY.DAT   S:RWE,O:RWE,G:RWE,W NET$PROXY.DAT   S:RWE,O:RWE,G:RWE,W MSGHLP$MAIN.EXE   S:RE,O:RE,G:RE,W:RE RIGHTSLIST.DAT   S:RWED,O:RWED,G,W SYSUAF.DAT   S:RWED,O:RWED,G,W VMS$OBJECTS.DAT   S:RWE,O:RWE,G:RE,W VMS$PASSWORD_HISTORY.DATA   S:RWE,O:RWE,G,W [VMS$COMMON.SYSFONT] DECW.DIR PS_FONT_METRICS.DIR S:RWE,O:RWE,G:RE,W:RE VWS.DIR XDPS.DIR   [VMS$COMMON.SYSFONT] DECW.DIR PS_FONT_METRICS.DIR S:RWE,O:RWE,G:RE,W:RE VWS.DIR XDPS.DIR   [VMS$COMMON.SYSFONT.DECW]     100DPI.DIR 75DPI.DIR S:RWE,O:RWE,G:RE,W:RE COMMON.DIR CURSOR16.DIR   CURSOR32.DIR USER_100DPI.DIR   USER_75DPI.DIR USER_COMMON.DIR   USER_CURSOR16.DIR USER_CURSOR32.DIR   [VMS$COMMON.SYSHLP] DECW.DIR VMSDOC.DIR S:RWE,O:RWE,G:RE,W:RE MSGHLP$ENGLISH.EXE   S:RE,O:RE,G:RE,W:RE EXAMPLES.DIR   S:RWE,O:RWE,G:RE,W:RE [VMS$COMMON.SYSLIB] CDA$ACCESS.EXE DECW$DWTLIBSHR.EXE S:RW,O:RWED,G:R,W:R DECW$PRINTWGTSHR.EXE DECW$XLIBSHR.EXE   MSGHLP$ENGLISH.EXE MSGHLP$SHARE.EXE S:RE,O:RE,G:RE,W:RE VMS$PASSWORD_DIC
TIONARY.DATA   S:RE,O:RE,G,W XDPS$DPSBINDINGSSHR.EXE XDPS$DPSCLIENTSHR.EXE S:RW,O:RWED,G:R,W:R XDPS$DPSLIBSHR.EXE XNL$SHR.EXE   [VMS$COMMON.SYSMGR] SECURITY.AUDIT$JOURNAL   S:RWED,O:RWED,G:RE,W VMS$AUDIT_SERVER.DAT   S:RWE,O:RWE,G:RE,W WELCOME.TEMPLATE WELCOME.TXT S:RWED,O:RWED,G:RE,W:RE [VMS$COMMON.VUE$LIBRARY] SYSTEM.DIR USER.DIR S:RWE,O:RWE,G:RE,W:RE