HP NonStop Server Security

The Configuration Utility Program (COUP) is a utility used on D-series and earlier releases to make online changes to the configuration of devices and controllers. COUP is part of the Dynamic-System Configuration (DSC) facility. COUP has been super- ceded by SCF on G series OS releases.
COUP makes it possible to avoid shutting down and regenerating a system every time a change must be made to the configuration. COUP is used to:
Get information about the system configuration
Add, delete or alter the characteristics of controllers and other devices in the system configuration.
Add and delete disk volumes
Start or Stop devices' I/O processes.
Alter the SYSTEM^ID or SYSTEM^TIME attributes
COUP updates the OSCONFIG file, which stores the current operating system's configuration information.
RISK COUP is a security risk in its ability to alter the system-generated configuration dynamically. This could alter or disable devices on the system.
RISK COUP must be run locally to make changes to the system configuration, but queries can be done remotely. Remote execution access should normally not be allowed, forcing the local SUPER user to use this program.
By program default, only members of the SUPER Group can EXECUTE the COUP commands that alter the system configuration. This helps to mitigate the risk of accidental use by users outside the Super Group.
This program is used when system hardware changes are necessary or in emergency situations, requiring access by system operators or a hardware technician. General use of this program...