BUSCMD System Utility


The BUSCMD program is used to query or change the status of the X or Y interprocessor bus on TNS systems from UP DOWN and from CPU# to CPU#. BUSCMD is primarily used when some hardware event causes the interprocess path between the CPUs to be faulty.

RISK Because of internal, hard-coded security checks, only members of the SUPER Group can EXECUTE the BUSCMD program. This helps to mitigate the risk of accidental use by users outside the SUPER Group.

RISK BUSCMD is primarily a performance issue, rather than a security risk. The downing of an interprocessor bus could degrade the performance of the system significantly.

This program may be necessary when hardware repair is performed or in emergency situations, requiring access by system operators or a hardware technician. General use of this program is not necessary.

Securing BUSCMD

BP-FILE-BUSCMD-01 BUSCMD should be secured "UUCU".

BP-OPSYS-LICENSE-01 BUSCMD must be LICENSED.

BP-OPSYS-OWNER-01 BUSCMD should be owned by SUPER.SUPER.

BP-OPSYS-FILELOC-01 BUSCMD must reside in $SYSTEM.SYSnn.

If available, use Safeguard software or a third party object security product to grant access to the BUSCMD object file only to users who require access in order to perform their jobs.

BP-SAFE-BUSCMD-01 Add a Safeguard Protection Record to grant appropriate access to the BUSCMD object file.

Discovery Questions

Look here:

OPSYS-OWNER-01

Who owns the BUSCMD object file?

Fileinfo

OPSYS-LICENSE-01

Is the BUSCMD object file licensed?

Fileinfo

FILE-POLICY

Who is allowed to execute BUSCMD on the system?

Policy

FILE-BUSCMD-01 SAFE-BUSCMD-01

Is the BUSCMD object file correctly secured with the Guardian or Safeguard system?

Fileinfo Safecom




HP NonStop Server Security 2004
HP NonStop Server Security 2004
ISBN: 159059035X
EAN: N/A
Year: 2004
Pages: 157

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net