System Management Requirements

If both a Table of Contents and Search form are not displayed in separate frames along with this one, you may wish to redisplay this book in a frameset, beginning with the first page.

HP OpenVMS Guide to System Security

Security for the System Administrator

Using Protected Subsystems

Design Considerations

Building the Subsystem

System Management Requirements

Although an unprivileged user can build and manage a protectedsubsystem, you need to be involved at two points in the process:at the beginning to create the necessary identifiers for the subsystemand at the end to mount the volume with the protected subsystem.

You need to perform the following tasks:

Create identifiersfor the subsystem, each with the Subsystem attribute. The Subsystemattribute empowers the identifier's holder to manage the subsystem.

Grant these subsystem identifiers with Subsystemattributes to the people who will serve as managers of the subsystem.This enables them to assign the subsystem identifier to the imagesthat make up the subsystem.

Give the subsystem managers control access to applicationimages. They need control access so they can add Subsystem ACEsto the image ACLs.

Give the subsystem managers control access to existingresources that are to be managed by the protected subsystem.

Although subsystem managers may need control access to keysystem resources, the ACL on the objects limits their access rightsto only those resources. This may not be as dangerous as installingan image with SYSPRV.

The following example shows how you can set up identifiersand the necessary application access so that users can manage amembership list:
Example 1 SettingUp Identifiers and Application Access for Managing Membership List
$ SET DEFAULT SYS$SYSTEM$ RUN AUTHORIZEUAF> ADD/IDENTIFIER MEMBERS_SUBSYSTEM- [1]_UAF> /ATTRIBUTES=(SUBSYSTEM,RESOURCE)UAF> GRANT/IDENTIFIER MEMBERS_SUBSYSTEM - [2]_UAF> /ATTRIBUTES=(SUBSYSTEM,RESOURCE) LOUISUAF> GRANT/IDENTIFIER MEMBERS_SUBSYSTEM -_UAF> /ATTRIBUTES=(SUBSYSTEM,RESOURCE) WU$ SET SECURITY/ACL=(IDENTIFIER=MEMBERS_SUBSYSTEM,- [3]_$ ACCESS=CONTROL) MEMBER_LIST.EXE
Use AUTHORIZE to create a subsystemidentifier called MEMBERS_SUBSYSTEM. Notice that this identifiercarries the Subsystem attribute.
Make Louis and Wu holders of the identifier so theycan manage the subsystem.
Give Louis and Wu control access to the subsystemimage MEMBER_LIST.EXE.

Note that you create the subsystem identifier MEMBERS_SUBSYSTEMwith the Resource attribute. This allows disk space to be chargedto the identifier MEMBERS_SUBSYSTEM and not the individuals accessing thesubsystem. (When using the Resource attribute, be careful to setthe appropriate ACLs on directories [see Setting Up the ACL].)

Design Considerations

Building the Subsystem