Security Management Guide (G06.24+, H06.03+)

Guardian System Security
Security Management Guide—522283-008
2-22
Licensing Programs
Initializing NonStop SQL/MP
The super ID is needed to initialize HP NonStop SQL/MP and to reinitialize subsequent
RVUs.
Controlling User IDs
The super ID is needed to add new user groups or to add user IDs to administrative
groups that do not have a group manager ID.
The super ID is also needed to delete user IDs from administrative groups that do not
have a group manager ID.
Responding to System Emergencies
In an emergency, the super ID might be needed to resolve problems. For example, the
super ID is needed to debug or inspect privileged code.
Licensing Programs
Only the super ID can license a program or revoke its license. However, the initial
licensing of system programs is done automatically by the INSTALL program running
as the super ID.
Privileged Operations
Privileged operations are operations reserved for use by the operating system.
Licensing a program has the effect of giving the program the privileges of the operating
system. When a licensed program runs, privileged operations in it can bypass any
ordinary security interface (such as authentication of user IDs and memory-
management protection).
Controlled and Orderly Access to Resources
The operating system uses privileged operations to control access to hardware and
certain software resources.
The operating system prevents user programs and terminal users from directly
performing privileged operations.
When a user program needs to perform a privileged operation (for example, when
accessing a disk or terminal), it must request that the operating system perform the
operation.
Caution. As a general rule, do not license user programs. Doing so can seriously compromise
system security and integrity. If you must license user programs, be sure to read Administrative
Procedures on page 2-24.