DISKGEN System Utility


DISKGEN is a part of the utilities that are invoked during a SYSGEN that copies the new files to a System Image Disk (SID).

A SYSGENR option invokes the DISKGEN program to copy directly to disk those files necessary to generate an HP NonStop Kernel operating system. DISKGEN can be used instead of a System Image Tape (SIT).

Using DISKGEN for system generation and running SYSGENR outside of DSM/SCM, is an action that is not recommended.

RISK Using DISKGEN directly is NOT recommended as the normal method of sysgening a system image and should be strictly secured.

RISK Only those who know how to use DISKGEN properly should use it.

Securing DISKGEN

BP-FILE-DISKGEN-01 DISKGEN should be secured "UUCU".

BP-OPSYS-LICENSE-01 DISKGEN must be LICENSED.

BP-OPSYS-OWNER-01 DISKGEN should be owned by SUPER.SUPER.

BP-OPSYS-FILELOC-01 DISKGEN must reside in $SYSTEM.SYSnn.

If available, use Safeguard software or a third party object security product to grant access to DISKGEN object files only to users who require access in order to perform their jobs.

BP-SAFE-DISKGEN-01 Add a Safeguard Protection Record to grant appropriate access to the DISKGEN object file.

Discovery Questions

Look here:

OPSYS-OWNER-01

Who owns the DISKGEN object file?

Fileinfo

OPSYS-LICENSE-01

Is the DISKGEN object file licensed?

Fileinfo

FILE-POLICY

Who is allowed to execute DISKGEN on the system?

Policy

FILE-DISKGEN-01
SAFE-DISKGEN-01

Is the DISKGEN object file correctly secured with the Guardian or Safeguard system?

Fileinfo Safecom

Related Topics

System Generation

DSMSCM

SYSGEN




HP NonStop Server Security 2004
HP NonStop Server Security 2004
ISBN: 159059035X
EAN: N/A
Year: 2004
Pages: 157

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net