[HR]

OpenVMS Guide to System Security

Previous | Contents

B

Backup operations
- general recommendations
Backups
- general recommendations
Batch identifiers
Batch jobs
Batch logins
Break-in alarms
Break-in attempts
Break key and secure servers
BUGCHK privilege
BYPASS privilege

C

C2 environments
Capability objects
- as protected objects
- elements of
- reestablishing profile
- template profile
- types of access
Captive accounts
- command procedures
- disabling mail and notification of delivery
- example of production account
- locked passwords and
- when to use #1
- when to use #2
Case sensitivity
- in passwords and user names
$CHKPRO system service
- role in access control
/CLITABLES qualifier #1
/CLITABLES qualifier #2
Cluster environments
- C2 system restrictions
CLUSTER_AUTHORIZE.DAT files #1
CLUSTER_AUTHORIZE.DAT files #2
CMEXEC privilege
CMKRNL privilege
Command procedures
- STARTNET.COM
- SYSTARTUP_VMS.COM
Common event flag clusters
- as protected objects
- events audited
- privilege requirements
- reestablishing security profile
- security elements of
- system modifications of templates
- template profile
- types of access
Communications devices
- C2 system requirements
- default security elements
Connections
- auditing
Connections, auditing of
Console terminals
- C2 system requirements
- C2 systems and
- HSC and C2 system requirements
Control access
- acquiring #1
- acquiring #2
- acquiring #3
- common event flag clusters
- devices
- files
- global sections
- limitations
- logical name tables
- queues
- resource domains
- security class
- volumes
COPY command
- security profile assigned
Create access
- logical name tables
- volumes
Creator ACEs
- example
- with resource identifiers
Ctrl/B key sequence

D

Databases
- authorization #1
- authorization #2
- protected objects
DCL commands
- SET HOST/DTE in network operations
- SET TERMINAL in network operations
DDCMP (Digital Data Communications Message Protocol)
- asynchronous driver
DEC/OSI full names
- not in C2 evaluation
DECamds
- software not in C2 evaluation
DECdns distributed name service
- not in C2 evaluation
DECnet
- C2 system restrictions
- cluster nodes and
- dynamic asynchronous connection
- INBOUND parameter
- installing dynamic asynchronous connection
- nonprivileged user name
- receive password #1
- receive password #2
- transmit password
DECnet accounts
- network objects #1
- network objects #2
DECnet-VAX
- dynamic asynchronous connection #1
- dynamic asynchronous connection #2
- INBOUND parameter
- installing dynamic asynchronous connection
- receive passwords
- transmit passwords
Decryption
DECwindows screens, clearing #1
DECwindows screens, clearing #2
DECwindows screens, clearing #3
DECwindows software
- not in C2 evaluation
Default ownership
- for directories
- for files
- for protected objects #1
- for protected objects #2
Default protection
- Alpha system files
- for directories
- for files
- for processes #1
- for processes #2
- for VAX system files
- management
Default Protection ACEs #1
Default Protection ACEs #2
Default Protection ACEs #3
- generating default file protection #1
- generating default file protection #2
Delete access
- common event flag clusters
- files
- granting through protection codes
- logical name tables
- queues
  - through ACLs
  - through protection codes
- volumes
DETACH privilege
Devices
- access requirements
- as protected objects
- controlling access through ACLs
- default security elements
- events audited
- modifying security profiles of
- privilege requirements
- profile storage
- protecting BACKUP save sets
- reusing in C2 systems
- security elements of
- spooled, access requirements
- template security profiles
- terminal configuration
DIAGNOSE privilege
Dialup identifiers
Dialup lines
- connection security
- controlling access to
- using for dynamic asynchronous connection
- using in a public area
Dialup logins
- breaking connections
- controlling retries
- failures
- retries
Directories
- access control through ACLs
- access requirements #1
- access requirements #2
- assigning a security profile
- controlling access to files #1
- controlling access to files #2
- creating
- events audited
- ownership
- setting default file protection
- setting file protection
Disconnected job messages
Disk quotas
- as restriction for users
- charging to identifiers
Disk scavenging
- discouraging
- preventing #1
- preventing #2
Disk space
- charging to identifier
- requirements for security audit log file
- usage and charging
Disk volumes
- controlling access
- restrictions
Disks
- accessing deleted data
- changing message transfer rate
- default security elements
- erase-on-allocate #1
- erase-on-allocate #2
- erasing #1
- erasing #2
- erasure patterns #1
- erasure patterns #2
- highwater marking #1
- highwater marking #2
- managing security profiles
- protecting after file deletion
- volume protection
DOWNGRADE privilege
DSE (data security erase)
- tailoring
Dynamic asynchronous connections
- automatic switching of terminal line
- connection example
- manual switching of terminal line
- passwords for
- procedure for establishing
- security
- switching of terminal line
- terminating the link
- verifier
Dynamic attribute for identifiers

E

F

Previous | Next | Contents | [Home] | [Comments] | [Ordering info] | [Help]

[HR]

  6346PI01.HTM
  OSSG Documentation
  22-NOV-1996 13:05:38.93

Copyright © Digital Equipment Corporation 1996. All Rights Reserved.