1Select the entire text of the Node field by clicking G three times in rapid succession, or else by dragging across the field. G The selected portion will be highlighted with reverse video. Typing in 5 the desired node name will replace the existing text. E Another change you will want to make is to specify the r tributary nodes. For a very simple D policy with the Disk facility disabled and minimal ? password guessing it might be as little as 5 minutes. For more H extensive testing, especially on heavily loaded machines, it might take several hours.
3 
G Select the Report command from the Control menu of the Main window. A F dialog box will be created with a list of possible assessments to be G reviewed. (It may be shorter than the list for the Run command, since E it does not include assessments for which the Run command has never D been issued). Double click on the desired assessment, and a Result window will be created.
0 In the result window you will see a list of all $ violations reported D from the running of the assessment. They are arranged in alphabetic F order by node name and then in alphabetic order by test name. Use the F scroll bar slider on the right hand side to move up and down the list 8 if it is longer than can be shown on the screen at once.
% 
i 3.4 Overview of LJK/Security Pulldown Menus
G Formalizing some of the information in the previous section, there are , four types of LJK/Security windows provided:
- Main
- Assessment
- Policy
- Result
@ 3.4.1 Main Window Menus
= The Control Menu contains commands to control the running of - assessments and to review assessment results.
G The File menu contains commands to create new assessments and policies A and to open existing new assessments and policies for review and
modification.
H The Kit menu contains commands to generate VMSINSTAL kits to be used to $ install software on tributary nodes.
? The DECwindows menu contains commands to save and restore user preferences.
H The Help menu contains commands to get further information on operation % of the LJK/Security Window Interface.
! 
L 3.4.2 Assessment Window Menus
C The Control Menu contains a command to close the Assessment Window.
H The Edit menu contains commands to transfer information to and from the F clipboard and to show or modify the contents of individual Assessment D records. Double-clicking on an individual record performs a default B action which is equivalent to the Modify command on the Edit menu.
H The Help menu contains commands to get further information on operation % of the LJK/Security Window Interface.
# 
D 3.4.3 Policy Window Menus
? The Control Menu contains a command to close the Policy Window.
H The Edit menu contains commands to transfer information to and from the @ clipboard and to show or modify the contents of existing Policy D records, and to create new Exemption records. Double-clicking on an G individual record performs a default action which is equivalent to the Modify command on the Edit menu.
H The Help menu contains commands to get further information on operation % of the LJK/Security Window Interface.
# 
D 3.4.4 Result Window Menus
? The Control Menu contains a command to close the Result Window.
? The Edit menu contains commands to transfer information to the
clipboard.
H The Help menu contains commands to get further information on operation % of the LJK/Security Window Interface.
# 
q 3.5 Using the Window Interface for Day-to-Day Tasks
@ This section gives a sampling of some of the tasks which can be @ performed with the LJK/Security Window Interface. The choice of D examples is intended to demonstrate aspects of the Window Interface > which are particularly useful but were not already covered in o Section 3.3, Using the Window Interface on a New Installation.
F For information on specific portions of LJK/Security Window Interface displays, use the mechanism described in Section 3.2, Context Sensitive Help.
M 3.5.1 Viewing Multiple Assessments
G Using the commands from the File menu of the Main Window, you can open A multiple assessments and policies at the same time, to the limit E permitted by the quotas authorized by your VMS account. (Exact quota 1 values required depend on VMS versions and other variables---experimentation is G the best method to determine what quota settings support your required pattern of operation.)
& 
W 3.5.2 Copying an entry to another assessment
E You can select one or more lines in an assessment window and use the > Copy command from the Edit menu to copy them to the clipboard.
" 
E After the records have been copied to the DECwindows clipboard, they C can be pasted back into a different assessment window by using the F Paste command from the Edit menu of the target assessment window. The D information copied is the full detailed assessment record, not just + what is displayed in the assessment window.
D Note that when a Paste command is used on an LJK/Security window, a 7 dialog box is created asking for entry into the comment D field. Whether such a field must be filled in depends on your local C rules, but in any case, LJK/Security does keep track of which user E performed the Paste operation, since that is the same as modifying a record directly.
# 
A Information copied to the clipboard from LJK/Security Assessment A Windows can also be pasted into text windows of other DECwindows B applications. That information is passed to those applications in E summary text form (as shown in the assessment window) rather than in 2 the binary form used between LJK/Security windows.
D For advanced DECwindows users, all four forms of QuickCopy are also ; available between LJK/Security assessment windows. See the : DECwindows documentation from VMS Development for details.
U 3.5.3 Removing an entry from an assessment
F The mechanism for removing records from an assessment with the Window B Interface is to select the desired record(s) and then use the Cut 4 command from the Edit menu of the Assessment window.
! 
F The Cut command also copies the record to the clipboard, but if those C contents of the clipboard never get pasted anywhere that effect is immaterial.
G Note that records cut from an LJK/Security assessment window still are E displayed in that window, but with only the Node text field showing. D This is to allow a security officer to review the history of record e deletions, as discussed in Section 3.5.4
a>. e 3.5.4 Modification based on an assessment history record
G When you have created an assessment dialog box with the Modify command F from the Edit Menu (or by double-clicking on a line in the assessment F window), there is a vertical scroll bar along the right edge. You can A examine any previous versions of records for the subject node by . dragging the scroll bar slider toward the top.
% 
D While viewing any previous version, you can use it as the basis for A further modifications by making any desired changes, such as the 8 Comment field, and clicking on the Apply (or OK) button.
O 3.5.5 Examining an assessment entry
6 
H Select the Show command from the Edit menu of the Assessment window to F create a Read-Only assessment dialog box. Attempts to modify records 6 using the resulting dialog box will not be effective.
" 
I 3.5.6 Modifying policy values
? Methods available for modifying the value in a policy limit or F exemption dialog box vary depending on the data type of the value. In E all cases, however, you can type text into the value field if you do 4 not want to use one of the more specialized methods. ; 3.5.6.1 Boolean
5 Boolean values have radio buttons for True and False.
% 
9 3.5.6.2 Scale
F Numeric values have a scale whose slider can be dragged left or right.
# 
B This works best for scales where the range of possible values are B limited, such as percentages or hours in the day. Moving a slider D between 0 and 2,147.483,647 to exactly 1,236 is quite difficult! In D such a case, typing the desired number into the value field is best.
/ Note
G In the future, LJK Software may reduce the range of those wide-ranging G scales so that only the more popular values can be set using the scale = and character typing must be used for extreme values. |
> 3.5.6.3 Protection
B For file or device protections, you can modify an array of toggle - buttons covering the protection field values.
( 
C 3.5.6.4 Privilege Level
F For Privilege Levels, select one of the seven radio buttons which are
displayed.
# 
L 3.5.7 Modifying a policy disable
C For each LJK/Security facility, the first policy record shown is a G disable record which can be used to disable or enable C testing of that facility. The dialog box for those records has two 2 radio buttons, similar to that for boolean values.
% 
Z 3.5.8 Cutting a policy only removes exemptions
G When records are cut from a policy, all selected records are moved (to F the clipboard, for example), but only exemptions are deleted from the D policy window. This is because there must always be some record for disables and limits.
& 
E As with assessments, (exemption) records cut from a policy are still H available in the policy window to allow examination of history records. D Compared to assessment entries, deleted policy exemptions have more F fields still visible (only the value is erased), so the effect of the " Cut command may seem less obvious.
9 Chapter 4
Menu Interface
[ This chapter describes how to control LJK/Security using a character cell display terminal.
G The menu interface provides user-friendly, visually oriented access to F LJK/Security functions, compatible with character-cell video terminals back to the VT100 series.
d 4.1 How to Use the Menu Interface
D - Start LJK/Security from the DCL prompt by issuing the command:
E If your terminal is a VT100-compatible video terminal (and that fact has been F indicated to VMS with the SET TERMINAL command), the main menu will be
displayed.D - Once any menu has been displayed on the screen, you can make a A menu selection by using the [up arrow] and [down arrow] keys < on the item you want. Then press the [Return] or [Enter] key to make that selection.I
- When a menu selection is made, the next menu "page" will be 6 displayed or a popup box requesting input will appear. H
- To exit from any menu page and get back to the previous menu, use ! the [down arrow] key D to get to the "Exit this menu" selection (which is always last) and 3 press the [Return] or [Enter] E key.
Experienced users may prefer to use the [Ctrl/Z] combination to exit from a menu.I - The Browse Box used to look at assessment reports does 9 not have an "Exit this menu" selection, but pressing the ) [Return] or [Enter] key on any item will exit.
l 4.2 Using the Menu Interface on a New Installation
A This section discusses the minimal set of actions required for a G security officer to set up LJK/Security on a new system using the Menu C Interface. The description presumes the system manager has already D installed the software using VMSINSTAL, as described in steps a-e of e Section 2.2, Installation on the Master Node.
E Tremendous numbers of violation reports can be generated by the DISK F facility, so as a brand new user of LJK/Security you F will likely have an easier time devising your initial policies if you H start with the DISK facility disabled. Enable the DISK F facility again after you are happy with results from the rest of your policy.
D 4.2.1 Starting LJK/Security
A Use the command LJK/SECURITY to start LJK/Security with the Menu C Interface. Providing your terminal has at least the VT100 level of A features (and those features have been so indicated with the VMS 7 command SET TERMINAL), the main menu will be displayed:
A To run at a VAXstation or AXP Workstation entirely in a terminal < emulator window using the Menu Interface, use the qualifier /INTERFACE=. The possible values are:
" /INTERFACE=DECWINDOWS or " /INTERFACE=CHARACTER_CELL |
B You can specify use of the Command Interface rather than the Menu D Interface by using the qualifier /NOSMG in addition to the - /INTERFACE=CHARACTER_CELL qualifier.
> 4.2.2 Creating a Policy
D Each master node running LJK/Security must have at E least one policy to contain the rules against which % VMS system security will be measured.
6 
> Use the [up arrow] and [down arrow] keys to highlight Customize on the ; LJK/Security menu and then use the [Return] or C [Enter] key to bring up the Customize Menu.
H The Customize Menu offers a selection between the various actions which = can be applied to customize assessments and policies.
7 
> Use the [up arrow] and [down arrow] keys to highlight Create Policy on the 8 Customize menu and then use the [Return] or = [Enter] key to select " policy creation.
E In the popup box, enter the name1 you want to use for the @ new policy, followed by the [Return] key.
& 
" Subsequent menus offer choices of:
I - including limits from the policy named DEFAULT 3
- including disables from the ' policy named DEFAULT 5
- including exemptions from the ' policy named DEFAULT +
- showing audit and logging information
2 For the last, choose Without Logging to save time. C 4.2.3 Adding an Exemption
3 Limits for individual tests within an LJK/Security G policy set the overall standard against which testing H will be done, but in certain cases more lenient standards should be set G up through use of an exemption. For example, the test G (UAF, PRIVLEVEL, ABSOLUTHI) generally prohibits assignment of powerful @ VMS privileges. In the case of the username "SYSTEM", D however, such privileges are required, for instance to allow proper F operation of system management batch jobs which might be submitted as % part of the system startup procedure.
E This section shows how to add such an exemption for the username "SYSTEM".
6 
> Use the [up arrow] and [down arrow] keys to highlight Modify Policy on the 8 Customize menu and then use the [Return] or = [Enter] key to select & policy modification.
D The available policies will be displayed in a menu.
6 
> Use the [up arrow] and [down arrow] keys to highlight the policy I you want on the Modify Policy menu and then use the [Return] E or [Enter] key to select that policy.
& In subsequent menus you should select:
- Set exemption
- UAF
- PRIVLEVEL
- ABSOLUTHI
@ In the value popup box, enter the value you want to use for the ? exemption, followed by the [Return] G key. The possible values for each test are described Å in Chapter 6,LJK/Security Tests. In the case of this example, the proper value is "Category-All".
$ 
F In the Exemption Argument 1 popup box, enter what you want to use for ? the first exemption argument, followed by the [Return] E key. The first exemption argument is always a node ? name or the wildcard character "*", as described in ~ Chapter 6,LJK/Security Tests. In the case of this example, the proper value is F "*", to indicate that the exemption is to apply to all nodes.
$ 
F In the Exemption Argument 2 popup box, enter what you want to use for @ the second exemption argument, followed by the [Return] G key. The use of the second exemption argument varies @ according to the facility being tested and is Ä described for each facility in Chapter 6,LJK/Security Tests. In the case of this G example, the proper value is "SYSTEM", to indicate that the H username SYSTEM is the one for which the exemption is desired.
$ 
" Subsequent menus offer choices of:
+ - showing audit and logging information
C 4.2.4 Creating an Assessment
D The specification of which policies apply to which > tributary nodes is stored as an LJK/Security G assessment. The assessment thus also ? provides a list of which nodes are to be tested, excluding for D instance, any which do not have the LJK/Security software installed.
7 
> Use the [up arrow] and [down arrow] keys to highlight Create Assessment on the 8 Customize menu and then use the [Return] or = [Enter] key to select & assessment creation.
E In the popup box, enter the name2 you want to use for the D new assessment, followed by the [Return] key.
& 
" Subsequent menus offer choices of:
J - including entries from the assessment named DEFAULT+
- showing audit and logging information
H Unlike the policy creation situation, it is reasonable G to ask for logging of assessment creation information. A The assessment just created, however, lacks any , indication of specific nodes to be assessed.
6 
> Use the [up arrow] and [down arrow] keys to highlight Modify Assessment on the 8 Customize menu and then use the [Return] or = [Enter] key to select * assessment modification.
G The available assessments will be displayed in a menu.
6 
> Use the [up arrow] and [down arrow] keys to highlight the H assessment you want on the Modify Assessment menu and ; then use the [Return] or [Enter] key to select that assessment.
$ In the next menus you should select:
G In the node name popup box, enter the name3 of the node you @ want to add to the assessment, followed by the [Return] key.
" 
9 Use the [up arrow] and [down arrow] A keys to highlight Policy on the Named Node menu and then use the ) [Return] or [Enter] key.
D The available policies will be displayed in a menu.
" 
9 Use the [up arrow] and [down arrow] E keys to highlight the policy you want on the Policy H For Node menu and then use the [Return] or [Enter] , key to select that policy.
$ In the next menus you should select:
; - DECnet medium for REQUEST (at least for this example) D
- Plaintext transmission for REQUEST (at least for this example):
- DECnet medium for RESULT (at least for this example)C
- Plaintext transmission for RESULT (at least for this example)
H In the Comment popup box, enter any information you want to store about 5 the modification, followed by the [Return] key.
$ 
$ In the final menu you should select:
+ - showing audit and logging information
H Unlike the policy creation situation, it is reasonable ?
Select the Run command from the Control menu on the Main window. This
creates a dialog box from which you can select which assessment to run.
