Flylib.com

Books Software

 
 
 

AUDSERV System Program


AUDSERV System Program

AUDSERV is only used in an SQL environment. It is not an interactive program; it is invoked by the NonStop TMF subsystem. AUDSERV makes it possible for applications to share the use of a table or index during DDL reorganization.

AUDSERV is invoked when re-organization work is happening concurrently with normal data access. Splitting a partition is one situation where this can occur. When a partition is split, it takes some time for the rows in the table to be physically copied from one partition to another and then be deleted from the first partition. During this time, data access is suspended . If the partition is split while the application is running, AUDSERV interleaves the data access and reorganization functions, keeping track of all the " suspense " NonStop TMF audits generated by the data access and then applying them during the "commit" phase. This way, only a short table lock is needed to mark all the "suspensed" data changes being held in NonStop TMF software as applied. If applications couldn't share operations, then all user access would be locked out for the duration of the data reorganization.

RISK AUDSERV has no risk associated with user intervention.

Securing AUDSERV

BP-FILE-AUDSERV-01 AUDSERV should be secured "UUUU".

BP-OPSYS-LICENSE-02 AUDSERV must be LICENSED.

BP-OPSYS-OWNER-02 AUDSERV should be owned by SUPER.SUPER.

BP-OPSYS-FILELOC-02 AUDSERV must reside in $SYSTEM.SYSTEM.

If available, use Safeguard software or a third party object security product to grant access to AUDSERV only to users who require access in order to perform their jobs.

BP-SAFE-AUDSERV-01 Add a Safeguard Protection Record to grant appropriate access to the AUDSERV object file equivalent to the Guardian file security string listed above.

Discovery Questions

Look here:

OPSYS-OWNER-02

Who owns the AUDSERV object file?

Fileinfo

OPSYS-LICENSE-02

Is the AUDSERV object file licensed?

Fileinfo

FILE-AUDSERV-01 SAFE-AUDSERV-01

Is the AUDSERV object file correctly secured with the Guardian or Safeguard system?

Fileinfo Safecom

Related Topics

SQL

NonStop TMF software



AXCEL User Program

The Accelerator (AXCEL) program transforms HP NonStop server compiled language object code to produce accelerated object code, which may run faster. How much faster depends on whether or not the code runs on a RISC (TNS/R) system or an older CISC (TNS) system.

AXCEL is used with TNS compilers and not with native compilers. Native languages are already accelerated for performance. Programs consisting mainly of calls on system code do not get much additional performance gain by acceleration because system code has already been native-compiled. Programs consisting of large amount of user code may gain significant performance by the acceleration compilation (See Figure 6-1).

click to expand
Figure 6.1: Accelerating

RISK AXCEL presents no security risks.

Securing AXCEL

BP-FILE-AXCEL-01 AXCEL should be secured "UUNU".

BP-OPSYS-OWNER-02 AXCEL should be owned by SUPER.SUPER.

BP-OPSYS-FILELOC-02 AXCEL must reside in $SYSTEM.SYSTEM.

AP-ADVICE-AXCEL-01 AXCEL is resource intensive and could affect application processing. Code need not be accelerated on the system where the accelerated object file will be executed.

AP-ADVICE-AXCEL-02 To avoid impacting applications, programs should be accelerated on a development or test system and the accelerated program moved to the secure site.

If available, use Safeguard software or a third party object security product to grant access to AXCEL object files only to users who require access in order to perform their jobs.

BP-SAFE-AXCEL-01 Add a Safeguard Protection Record to grant appropriate access to the AXCEL object file.

Discovery Questions

Look here:

FILE-POLICY

Are accelerations performed on the system?

Policy

OPSYS-OWNER-02

Who owns the AXCEL object file?

Fileinfo

FILE-POLICY

Who is allowed to execute AXCEL on the system?

Policy

FILE-AXCEL-01
SAFE-AXCEL-01

Is the AXCEL object file correctly secured with the Guardian or Safeguard system?

Fileinfo Safecom

Related Topics

Compilers

Securing Applications