Guide to System Security

This document provides a detailed overview of the security features available in the OpenVMS operating system. It is organized into three parts:

• Part I: Security Overview covers basic security principles, including types of security threats, the reference monitor concept, and how to build a secure environment.
• Part II: Security for the User details user-level security actions, such as choosing strong passwords, logging in and out responsibly, and protecting personal data with access control lists (ACLs) and protection codes.
• Part III: Security for the System Administrator describes the responsibilities of a security administrator, including managing system access, controlling access to data, implementing security auditing, handling security breaches, and configuring the system for C2-level security.

The guide also includes appendices on user privileges, system file protection, and specific configurations for C2-evaluated environments.