HP NonStop Server Security
This handbook provides readable advice on the key decisions in safeguarding the numerous components of the HP NonStop environment.
TABLE OF CONTENTS HP NonStop Server Security
BACKCOPY System Utility
The BACKCOPY utility duplicates tape made in the file-mode format for archiving or any duplication reason. The BACKCOPY utility cannot make a copy of a tape backed up using the volume-mode format.
The Corporate Security Policy should detail procedures for physically securing tapes in a tape library.
RISK Tapes can contain sensitive data. Therefore, access to tapes must be controlled physically to ensure security. Copies should only be made by authorized personnel.
Securing BACKCOPY
BP-FILE-BACKCOPY-01 BACKCOPY should be secured "UUCU".
BP-OPSYS-LICENSE-01 BACKCOPY must be LICENSED.
BP-OPSYS-OWNER-01 BACKCOPY should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 BACKCOPY must reside in $SYSTEM.SYSnn.
If available, use Safeguard software or a third party object security product to grant access to BACKCOPY only to users who require access in order to perform their jobs.
BP-SAFE-BACKCOPY-01 Add a Safeguard Protection Record to grant appropriate access to the BACKCOPY object file.
| Discovery Questions | Look here: | |
|---|---|---|
| OPSYS-OWNER-01 | Who owns the BACKCOPY object file? | Fileinfo |
| OPSYS-LICENSE-01 | Is the BACKCOPY object file licensed? | Fileinfo |
| FILE-POLICY | Who is allowed to copy tapes from the system? | Policy |
| FILE-BACKCOPY-01 | Is the BACKCOPY object file correctly secured with the Guardian or Safeguard system? | Fileinfo Safecom |
Related Topics
BACKUP
TAPECOM
Copyright XYPRO Technology Corporation 2004 under license agreement with Books24x7
