How would you like me to use this forum?

[Antoniov.]

About search engine there are some news
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=567595&admit=716493758+1083068995438+28353475
Dan forgot advise vms area and this is not very funny :-(

@Antoniov

[Martin P.J. Zinser]

Hi,

definitly an improvement of the search engine for the forums (inbefore it was next to useless really). As for Altavista, this does not belong to hp anymore, so maybe they should partner with Google ;-) I anyhow often do a

site:hp.com search in Google rather than using hp's engine.

Greetings, Martin

[Art Wiens]

Hi Sue and welcome here!

Speaking of "Google"ing, I thought these forums were a "members only" thing. A co-worker (who has too much free time) typed my name into Google, and the first hit was my recent MSCP Performance thread. I guess you only have to sign up to post? Now I have to be careful what I say _everywhere_!

Cheers,
Art

[Jim Bradley_1]

I'm a rank neophyte, actually barely familiar with VMS. However, I've been asked to find some guidelines or standards about how to securely implement VMS on ALpha servers. Based on the comments I've seen in the thread, you are clearly one of the cogniscenti in the area. Can you point me to any docs or material on this subject?

Thanks,
Jim

[Stanley F Quayle]

> I've been asked to find some guidelines or standards about how to securely implement VMS on ALpha servers.

Sure. Just go to:

http://h71000.www7.hp.com/doc/72final/6346/6346pro.html

It's OpenVMS Security Guide. Enjoy!

[Martin P.J. Zinser]

Hello Jim,

by design and implementation OpenVMS has pretty sound security from the ground up, with a fine grained system of object protection and user
privileges. In the most cases where there are problems they are rather the result of social engeneering than of technical shortcomings. So if somebody tells you they need privs because

a.) they are the boss ;-)
b.) they need them to run a certain app

look hard if the request is justified and can
not be solved e.g. by prudent application of ACLs and Rights identifiers.

Too many users with system/administrator/root rights do make every OS insecure. Just some of them faster than others. And I do have a strong opinion in which category VMS falls ;-)

Once you have specific questions come back to the forum and I am sure many here will be glad to help you.

All the best,

Martin

[Jim Bradley_1]

Stanley & Martin,
Thanks for the responses. I guess what I am looking for is something akin to the checklists that SANS, NSA and other organizations have published as to configuration choices for Unix and Windows systems in order to have a secure OS implementation. User rights and privs for file and other oject access would be peculiar to a specific system or application running on a VMS system but are there basic sonfiguration options to use that would be considered a "best practice" for VMS from a security perspective?

THanks again,
Jim
PS: How do I assign points to the repsonses?

[Hein van den Heuvel]

Jim Bradley wrote "PS: How do I assign points to the repsonses? "

You can not. Not in a direct way. (You could write to Sue telling her how sorry you are for hijacking her thread for your unrelated purposes and then ask her nicely to assign points for you. :-).

Seriously, It is nicer to start your own topic's for unrelated questions, and even related be different question.
It will give more recognition through an appropriate subject line, and as a bonus you also get to assign points to replies to your threads.

fwiw,
Hein.

[Jim Bradley_1]

Ooops,
Gomen asai,
Izvenitye,
Lo siento.
Thanks for the protocol pointer.

Jim

[Stanley F Quayle]

How about assigning some points to the responses?

Pointer to help on points:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33

Thanks in advance.