The CMEXEC privilege allows the user's process to executethe Change Mode to Executive ($CMEXEC) system service.
This system service lets a process change its access modeto executive mode, execute a specified routine, and then returnto the access mode that was in effect before the system servicewas called. While in executive mode, the process is allowed to executethe Change Mode to Kernel ($CMKRNL) system service.
Grant this privilege only to users who need to gain accessto protected and sensitive data structures and internal functionsof the operating system. If unqualified users have unrestrictedaccess to sensitive data structures and functions, the operatingsystem and service to other users can be easily disrupted. Such disruptionscan include failure of the system, destruction of all system anduser data, and exposure of confidential information.
HP OpenVMS Guide to System Security
Security for the System Administrator
