OpenVMS VAX Guide to System Security

This document provides a comprehensive guide to system security within the OpenVMS VAX operating system (Version 6.0, May 1993). It is designed for both general users and security administrators.

Key areas covered include:

• Security Overview: An introduction to system security models, including the reference monitor concept, which serves as the framework for the operating system's security features.
• Security for the User: Guidelines for responsible system use, including choosing secure passwords, understanding different login types and classes, and protecting personal data using Access Control Lists (ACLs) and protection codes.
• Security for the System Administrator: Detailed procedures for managing system security, including user account establishment, rights database maintenance, password management, and system auditing. It also covers handling security breaches, securing clusters, and managing network security (including proxy logins and DECnet object accounts).
• Advanced Security: Information on using protected subsystems to manage access and operating the system within a C2-rated security environment.
• Appendices: Extensive reference material covering system privileges, recommended protection codes for critical system files, and examples of alarm and audit messages generated by the auditing subsystem.