OpenVMS Security

[Jim Bradley_1]

Is there anything like a SANS guide for Windows or Unix Security for OpenVMS - something checklist-ish?

Thanks,
Jim Bradley

[John Gillings]

Jim,

The "OpenVMS Guide to System Security" is a comprehensive and (imho) highly readable manual. It's available on the web at http://www.hp.com/go/openvms/doc/
under "OpenVMS Operating System".

If this doesn't meet your needs, please let us know how it should be changed.

[Martin P.J. Zinser · Accepted solution]

Hello,

to be more precise the current version of the
manual John mentioned is at

http://h71000.www7.hp.com/doc/732FINAL/aa-q2hlg-te/aa-q2hlg-te.PDF

(Btw, the HTML version is broken, can anybody from our hp colleagues get it fixed please?)

While some things will be familiar to you from other OSes (like ACLs), there are a few things specific to VMS, like a very fine grained set of privileges that can be assigned to users. Also installed priviledged images can be very usefull to make functions available that normally would require elevated privs.

If you do have a requirement for a 4-eye principle, this can be easily implemented with accounts using two different passwords for authentication. I am certain that once you have specific questions many people here will chip in with their own experience (some of us do work in security consious environemtens ;-)

Greetings, Martin

[Victor Mendham]

Anyone have a link or pdf for the security guide for OpenVMS 6.2

[Keith Cayemberg]

A Primer on OpenVMS (VMS) Security
SANS Security Essentials GSEC Practical Assignment, Version 1.3
Steven Bourdon
http://www.sans.org/rr/papers/index.php?id=604


The OpenVMS v6.2 Guide to System Security
http://www.sysworks.com.au/disk$vaxdocdec963/decw$book/dy4yaa88.decw$book

Sysworks has collected most of the
OpenVMS Bookreader ODL (online documentation library) over the past decade and put them online at...

http://www.sysworks.com.au/odl.html

Cheers!

Keith Cayemberg

[Keith Cayemberg]

Excuse me. I forgot to include this link as well...

OpenVMS 7.2 Security Essentials
by Jeffrey A. Leving
© SANS Institute 2003
http://www.sans.org/rr/papers/8/854.pdf

Cheers!

Keith Cayembe

[Mobeen_1]

Jim,
May be this would help you. Its called "OpenVMS Guide to System Security" and its available off

http://www.ntrface.com/~jr/decss.html

rgds
Mobeen

[Jim Bradley_1]

Keith, Victor, Martin, John and Mobeen -
My thanks to all of you for respoding. The
information you provided was extremely helpful - a tad intimidating - but very helpful. I haven't seen so much material on VMS in years.

Mobeen,
Thanks for the info but the links to Content and Index at that site produce "page cannot be found" results.

Thanks again,
Jim Bradley

[Mobeen_1]

Jim,
I just used that link again and i am able to pull that url up without any issues. It looks like you are having some issues :-)

http://www.ntrface.com/~jr/decss.html

regards
Mobeen

[Jan van den Ende]

Jim,
I tried Mobeen's link - just works fine for me.

Jan