System Processes
This section outlines many of the standard process that will be running on an active system. The list that follows uses the defaulted naming convention recommended by HP. (Some processes could be running as a different name .)
| Process Name | Description | Object File |
|---|---|---|
| $0 | Primary event message collector that provides a central collection point for all events from all subsystems in a system | OSIMAGE |
| $CMON | User command monitor process | $SYSTEM.<svol>.<cmonobj> |
| $<disk> | Physical Disk Volume, per volume | $SYSTEM.SYSnn.TSYSDP2 |
| $<vdisk> | Virtual Disk Volume, per volume | $SYSTEM.SYSnn.OVDP |
| $CLCI | Initial TACL process | $SYSTEM.SYSnn.TACL |
| $DMnn | INSPECT Collectors, one per CPU | $SYSTEM.SYSnn.DMON |
| $IMON | INSPECT Monitor | $SYSTEM.SYSnn.IMON |
| $NULL | Null output process | $SYSTEM.SYSTEM.NULL |
| $NCP | Expand line handler manager process | $SYSTEM.SYSnn.NCPOBJ |
| $PIPE | OSS pipe server | $SYSTEM.ZRSCHOST.PIPEMAN |
| $POOLnn | Storage pool processes, one per CPU | $SYSTEM.SYSnn.OPP |
| $SIMnn | Process per CPU | OSIMAGE |
| $S | Spooler Collector | $SYSTEM.SYSTEM.CSPOOL |
| $SPLS | Spooler Supervisor | $SYSTEM.SYSTEM.SPOOL |
| $SPLP | Spooler print processor | $SYSTEM.SYSTEM.SPOOLPA |
| $TMP | TMF TMP process | $SYSTEM.SYSnn.TMFTMP |
| $VHS | Virtual Home Terminal Process | $SYSTEM.VHS.VHS |
| $XBKn | NonStop TMF backout process | $SYSTEM.SYSnn.TMFBOUT |
| $XCAT | NonStop TMF catalog manager | $SYSTEM.SYSnn.TMFCTLG |
| $XDMS | Mediacom Server | $SYSTEM.SYSnn.MEDIASRV |
| $XMM | Measure Monitor | $SYSTEM.SYSnn.MEASMON |
| $XMnn | Measure Collectors per CPU | $SYSTEM.SYSnn.MEASCTL |
| $YMIOP | Interface to the MSP for other subsystems | OSIMAGE |
| $YPHI | DSM/SCM Pathway Application | $SYSTEM.SYSTEM.PATHMON |
| $Z0 | EMS Compatibility Distributor process for OSIMAGE. | OSIMAGE |
| $ZBAT | NetBatch Manager | $SYSTEM.SYSTEM.NETBATCH |
| $ZCDB | Configuration database manager process | $SYSTEM.SYSnn.ZCDB |
| $ZCNF | Configuration utility process | OSIMAGE |
| $ZCVPn | TSM event servers, one per CPU | $SYSTEM.SYSnn.CEVSMX |
| $ZDMP | TFDS process | $SYSTEM.SYSnn.TFDS |
| $ZEXP | Expand line handler manager process | $SYSTEM.SYSnn.OZEXP |
| $ZFMnn | OSS File Manager, one per CPU | $SYSTEM.SYSnn.OSSFM |
| $ZHOME | Virtual output process for system processes | $SYSTEM.SYSnn.ZHOME |
| $ZLnn | The LINKMON processes, one per CPU | $SYSTEM.SYSnn.ROUT |
| $ZLMnn | LAN monitor process, one per CPU | $SYSTEM.SYSnn.LANMON |
| $ZLOG | TMD collector | $SYSTEM.SYSnn.EMSACOLL |
| $ZMnn | QIO monitor process, one per CPU | $SYSTEM.SYSnn.QIOMON |
| $ZMSGQ | OSS message queue service | $SYSTEM.SYSnn.ZMSGQ |
| $ZNET | Subsystem Control Program (SCP) process | $SYSTEM.SYSnn.SCP |
| $ZNUP | Network utility process | OSIMAGE |
| $ZOPR | EMS system-level logger | OSIMAGE |
| $ZPHI | EMS alternate collector and logger | $SYSTEM.SYSnn.EMSACOLL |
| $ZPLS | OSS sockets local server | $SYSTEM.SYSnn.OSSLS |
| $ZPM | Persistence manager | $SYSTEM.SYSnn.ZPM |
| $ZPMON | OSS monitor process | $SYSTEM.SYSnn.OSSMON |
| $ZPMPn | RPC portmapper process | $SYSTEM.ZRPC.PORTMAP |
| $ZPNS | OSS name server | $SYSTEM.SYSnn.NS |
| $ZPPnn | OSS pipes server, one per CPU | $SYSTEM.SYSnn.OSSPS |
| $ZRSCX | TDP process | $SYSTEM.SYSTEM.TDP |
| $ZSnn | Safeguard process, one per CPU | $SYSTEM.SYSnn.OSMON |
| $ZSMP | Safeguard Manager Process | $SYSTEM.SYSnn.OSMP |
| $ZSMS | Storage Manager Process | $SYSTEM.SYSnn.OMP |
| $ZSPE | SP to EMS event conversion process | $SYSTEM.SYSnn.ZSPE |
| $ZSSnn | INSPECT process snapshot, one per CPU | $SYSTEM.SYSnn.INSPSNAP |
| $ZSVR | Labeled tape server process | $SYSTEM.SYSnn.ZSERVER |
| $ZTAnn | OSS transport agents , one per CPU | $SYSTEM.SYSnn.OSSTA |
| $ZTCPn | TCP/IP process, one per CPU | $SYSTEM.SYSnn.TCPIP |
| $ZTMnn | NonStop TMF monitor processes, one per CPU | $SYSTEM.SYSnn.TMFMON2 |
| $ZTNPn | Telnet server process | $SYSTEM.SYSnn.TELSERV |
| $ZTSM | TSM service application transfer process | $SYSTEM.SYSnn.SRM |
| $ZVHS | $VHS Pathway Process | $SYSTEM.SYSTEM.PATHMON |
| $ZVPT | ViewPoint PATHMON Process | $SYSTEM.SYSTEM.PATHMON |
| $ZZATM | Async subsystem monitor process | $SYSTEM.SYSnn.ATMASM |
| $ZZFOX | FOX subsystem monitor process | $SYSTEM.SYSnn.FOXMON |
| $ZZKRN | HP NonStop Kernel Manager Process | $SYSTEM.SYSnn.OZKRN |
| $ZZLAN | LAN subsystem manager process | $SYSTEM.SYSnn.LANMAN |
| $ZZSTO | Storage subsystem manager process | $SYSTEM.SYSnn.TZSTO |
| $ZZWAN | WAN subsystem manager process | $SYSTEM.SYSnn.WANMGR |
| $ZZWnn | Concentrator manager, one per CPU | $SYSTEM.SYSnn.CONMGR |
Securing System Processes
For system processes not otherwise noted throughout this Gazette, security is described below. For processes in the table above and not listed below, security is described in the appropriate section of the Gazette.
BP-FILE- SYSPROC-01 TSYSDP2 should be secured "UUCU".
BP-OPSYS-OWNER-01 TSYSDP2 should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 TSYSDP2 must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-02 NULL should be secured "UUNU".
BP-OPSYS-OWNER-02 NULL should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-02 NULL must reside in $SYSTEM.SYSTEM.
BP-FILE-SYSPROC-03 OZKRN should be secured "UUCU".
BP-OPSYS-LICENSE-01 OZKRN must be LICENSED.
BP-OPSYS-OWNER-01 OZKRN should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 OZKRN must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-04 ZHOME should be secured "UUCU".
BP-OPSYS-OWNER-01 ZHOME should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 ZHOME must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-05 CONMGR should be secured "UUCU".
BP-OPSYS-OWNER-01 CONMGR should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 CONMGR must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-06 SRM should be secured "UUCU".
BP-OPSYS-OWNER-01 SRM should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 SRM must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-07 ZSPE should be secured "UUCU".
BP-OPSYS-OWNER-01 ZSPE should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 ZSPE must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-08 ZPM should be secured "UUCU".
BP-OPSYS-OWNER-01 ZPM should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 ZPM must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-09 CEVSMX should be secured "UUCU".
BP-OPSYS-OWNER-01 CEVSMX should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 CEVSMX must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-10 ZCDB should be secured "UUCU".
BP-OPSYS-OWNER-01 ZCDB should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 ZCDB must reside in $SYSTEM.SYSnn.
BP-FILE-SYSPROC-11 QIOMON should be secured "UUCU".
BP-OPSYS-OWNER-01 QIOMON should be owned by SUPER.SUPER.
BP-OPSYS-FILELOC-01 QIOMON must reside in $SYSTEM.SYSnn.
If a third party process control product is used to grant selected users access to process control, only the users allowed to start and stop process should be allowed and all other commands should be restricted.
With a third party access control product
3P-PROCESS-SYSPROCS-01 Use a third party access control product to give the control of certain processes to a limited group of users only.
| Discovery Questions | Look here: | |
|---|---|---|
| OPSYS-OWNER-01 | Who owns the TSYSDP2 object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the OZKRN object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the ZHOME object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the CONMGR object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the SRM object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the ZSPE object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the ZPM object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the CEVSMX object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the ZCDB object file? | Fileinfo |
| OPSYS-OWNER-01 | Who owns the QIOMON object file? | Fileinfo |
| OPSYS-OWNER-02 | Who owns the NULL object file? | Fileinfo |
| OPSYS-LICENSE-01 | Is the OZKRN object file licensed? | Fileinfo |
| FILE-SYSPROC-01 | Is the TSYSDP2 object file secured correctly? | Fileinfo |
| FILE-SYSPROC-02 | Is the NULL object file secured correctly? | Fileinfo |
| FILE-SYSPROC-03 | Is the OZKRN object file secured correctly? | Fileinfo |
| FILE-SYSPROC-04 | Is the ZHOME object file secured correctly? | Fileinfo |
| FILE-SYSPROC-05 | Is the CONMGR object file secured correctly? | Fileinfo |
| FILE-SYSPROC-06 | Is the SRM object file secured correctly? | Fileinfo |
| FILE-SYSPROC-07 | Is the ZSPE object file secured correctly? | Fileinfo |
| FILE-SYSPROC-08 | Is the ZPM object file secured correctly? | Fileinfo |
| FILE-SYSPROC-09 | Is the CEVSMX object file secured correctly? | Fileinfo |
| FILE-SYSPROC-10 | Is the ZCDB object file secured correctly? | Fileinfo |
| FILE-SYSPROC-11 | Is the QIOMON object file secured correctly? | Fileinfo |
