OpenVMS Guide to System Security

Index

• Access
  • auditing of processes
  • BYPASS privilege
  • denying
  • how the system determines
  • performance impact of auditing
  • privileges bypassing ACLs
  • privileges bypassing protection codes
  • through ACLs
  • through GRPPRV privilege #1
  • through GRPPRV privilege #2
  • through protection codes
  • through READALL privilege
  • through SYSPRV privilege #1
  • through SYSPRV privilege #2
  • to deleted file data
• Access categories
• Access control
  • ACE order, importance of
  • assigning file defaults
  • bypassing ACLs
  • bypassing protection codes
  • comparing security profiles
  • controlling in network environment
  • default
  • default application account
  • default for inbound connection
  • denying a class of users
  • denying access through an ACL
  • evaluating a user's access request #1
  • evaluating a user's access request #2
  • explicit
  • for a network
  • for applications
  • for connections
  • for protected objects
  • in a network environment
  • limited-access accounts
  • limiting access to an environment #1
  • limiting access to an environment #2
  • limiting device access
  • limiting logins
  • object security profiles
  • object-specific considerations
  • protection code processing rules
  • protection code user categories
  • proxy #1
  • proxy #2
  • routing initialization passwords
  • through ACLs #1
  • through ACLs #2
  • using the NCP
• Access control strings #1
• Access control strings #2
  • command procedures and
  • exposing password in
  • protecting information in
  • secondary passwords with
• Access requirements
  • allocating devices
  • capability object
  • common event flag clusters
  • directories
  • file-oriented devices
  • files
  • global sections
  • I/O channel
  • logical name tables
  • non-file-oriented devices
  • queues
  • resource domains
  • security class objects
  • shareable devices
  • shared devices
  • spooled devices
  • unshareable devices
  • volumes
• Access types
  • abbreviations of
  • ACLs and
  • associate
  • capability class
  • class-dependency of
  • common event flag clusters
  • control #1
  • control #2
    • files
    • objects in general
  • create
    • logical name tables
    • volumes
  • delete
    • common event flag clusters
    • files
    • logical name tables
    • queues
    • volumes
  • directories
  • execute
    • files
    • global sections
  • files
  • global sections
  • lock
  • logical I/O
  • logical name tables
  • manage
  • physical I/O
  • protection codes and #1
  • protection codes and #2
  • queues
  • read
    • devices
    • files
    • global sections
    • logical name tables
    • queues
    • resource domains
    • volumes
  • resource domains
  • security audit and
  • security class
  • shared devices
  • submit
  • unshared devices
  • volumes
  • write
    • devices
    • files
    • global section
    • logical name tables
    • resource domains
    • volumes
• Accounts
  • accessing after password expires
  • application
  • auditing access
  • DECNET account, removing
  • designing secure accounts #1
  • designing secure accounts #2
  • disabling with DISUSER flag
  • disguising identity
  • expiration #1
  • expiration #2
  • first login
  • group
  • guest
  • initial password
  • interactive
  • limited-access
  • network objects #1
  • network objects #2
  • password expiration and
  • password requirements for
  • passwords for multiple
  • privileged
  • project #1
  • project #2
  • proxies for groups
  • proxy
  • renewing expired
  • secondary password
  • setting duration
  • setting up to use project identifiers
  • types of #1
  • types of #2
  • user passwords
• ACE attributes
  • Default
  • Hidden
  • None #1
  • None #2
  • Nopropagate #1
  • Nopropagate #2
  • Protected #1
  • Protected #2
  • Protected #3
• ACEs (access control entries)
  • adding
  • Alarm ACEs #1
  • Alarm ACEs #2
  • Audit ACEs #1
  • Audit ACEs #2
  • creating
  • Creator ACEs #1
  • Creator ACEs #2
  • Creator ACEs #3
  • Default Protection ACEs #1
  • Default Protection ACEs #2
  • Default Protection ACEs #3
  • Default Protection ACEs #4
    • examples
  • deleting
  • deleting protected ACEs
  • generating audit event messages
  • inserting in a list
  • order of #1
  • order of #2
  • order of #3
  • replacing
  • security auditing
  • sensitive files and
  • Subsystem ACEs #1
  • Subsystem ACEs #2
  • Subsystem ACEs #3
  • Subsystem ACEs #4
  • types
• ACL editor
  • displaying ACLs
  • modifying ACLs
• ACLs (access control lists) #1
• ACLs (access control lists) #2
  • ACE order #1
  • ACE order #2
  • ACE order #3
  • alarms generated by
  • assigning by default to new files
  • auditing in C2 systems
  • bypassing with special rights
  • copying
  • creating
  • deleting
  • deleting ACEs
  • deleting obsolete identifiers
  • designing
  • displaying #1
  • displaying #2
  • effect of privileges
  • effect on performance
  • granting access
  • interaction with protection codes
  • management overview
  • modifying
  • network file sharing
  • priority in access evaluation
  • protection codes and
  • queue access rights
  • reordering entries
  • replacing ACEs
  • restoring default ACL
  • restoring file default
  • security element of an object
  • setting file protection #1
  • setting file protection #2
  • system program files
• ACNT privilege
• Alarm ACEs
  • how to use
  • position in ACL
• Alarm messages
  • ACL event
  • authorization database modification
  • break-in event
  • INSTALL event
  • login
  • login failure
  • logout
  • network connection
  • object access event
  • object creation
  • object deaccess
  • object deletion
  • privilege use
  • process control event
  • SET AUDIT use
  • system parameter modification
  • time modification
  • volume mount/dismount
• Alarms
  • enabling for security
• ALLSPOOL privilege
• Alphanumeric UICs
• ALTPRI privilege
• ANALYZE/AUDIT command
  • qualifier summary
• Announcement messages
  • security disadvantages
• Archive files
  • analyzing security-relevant events
  • enabling remote
  • for security event messages
• Associate access
• Attacks, types of system
• Audit ACEs
  • how to use
• Audit Analysis utility (ANALYZE/AUDIT)
• AUDIT privilege
• Audit server databases
• Auditing
  • applications
  • as security feature
  • of security events
• $AUDIT_EVENT system service, reporting security-relevant events
• Authentication
  • external
• Authentication cards
  • C2 system requirements
• Authorization databases
  • adding users
  • auditing
  • auditing modifications to
  • contents
  • synchronizing authorization on clustered systems
• Authorize utility
  • ADD/FLAG command
  • EXTAUTH flag
  • MODIFY/FLAG command
• Autodial protocol
• Automatic login facility (ALF)
  • Autologin account as security problem
  • AUTOLOGIN flag
  • C2 systems and
  • cluster requirements for ALF files

  6346PIDX.HTM
  OSSG Documentation
  22-NOV-1996 13:05:45.85

Copyright © Digital Equipment Corporation 1996. All Rights Reserved.

Legal