HP NonStop Server Security
This handbook provides readable advice on the key decisions in safeguarding the numerous components of the HP NonStop environment.
TABLE OF CONTENTS HP NonStop Server Security
BACKUP User Program
The BACKUP utility copies data stored in disk files to magnetic tape for archival purposes. BACKUP is the primary method used to preserve the system's data files and programs. BACKUP is the archival method; RESTORE performs the complementary function to copy the data from tape to disk.
The Corporate Security Policy should detail procedures for physically securing tapes in a tape library.
RISK Tapes can contain sensitive data. Therefore, access to tapes must be controlled physically to ensure security. Copies should only be made by authorized personnel.
RISK BACKUP only requires READ access to perform the file read function. If the BACKUP program is accessible to general users, files containing sensitive data could be backed up and restored under their userid.
BACKUP is a privileged program and must be LICENSED to be runnable. Only SUPER.SUPER can run the program if it isn't licensed.
RISK If BACKUP isn't licensed, SQL tables cannot be backed up by anyone (including SUPER.SUPER).
Securing BACKUP
BP-FILE-BACKUP-01 BACKUP should be secured "UUNU".
BP-OPSYS-LICENSE-01 BACKUP must be LICENSED.
BP-OPSYS-OWNER-01 BACKUP should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 BACKUP must reside in $SYSTEM.SYSnn.
If available, use Safeguard software or a third party object security product to grant access to the BACKUP only to users who require access in order to perform their jobs.
BP-SAFE-BACKUP-01 Add a Safeguard Protection Record to grant appropriate access to the BACKUP object file.
Because operators frequently 'run' the backups and because, ideally, operators...
Copyright XYPRO Technology Corporation 2004 under license agreement with Books24x7
