Security Management Guide (G06.29+, H06.08+, J06.03+)

Guardian System Security
Security Management Guide — 522283-021
2 - 20
$CMON
When Safeguard is installed on the system, the following EMS message is displayed if
the password configuration attribute, PSWDUPPERCASEREQ, is altered using the
PWCONFIG program.
When Safeguard is installed and running on the system, the following EMS message is
displayed if the password configuration attribute, PSWDUPPERCASEREQ, is altered
using the SAFECOM program.
When Safeguard is installed on the system or not, similar EMS message will be
displayed if the attributes, PSWDUPPERCASEREQ, PSWDLOWERCASEREQ,
PSWDNUMERICREQ, PSWDSPECIALCHARREQ, PSWDALPHAREQ,
PSWDSPACESALLOWED, PSWDMINQUALITYREQ, PSWDMINUPPERCASEREQ,
PSWDMINLOWERCASEREQ, PSWDMINNUMERICREQ,
PSWDMINSPECIALCHARREQ, and PSWDMINALPHAREQ are altered using the
PWCONFIG program.
$CMON
$CMON programs can monitor and control requests to the command interpreter and
the Safeguard subsystem, such as logon requests and explicit or implicit RUN
commands. For example, you could write a $CMON program that does not allow
certain individuals to log on during nonbusiness hours or from certain terminal
locations. $CMON programs can also require the use of user names (instead of user
IDs) and blind passwords during logon attempts.
$CMON programs monitor requests only to the command interpreter or the Safeguard
subsystem. Requests made through other programs, such as TEDIT, are not
monitored.
Protect the object code for $CMON programs so that only the owner has WRITE
authority
.
For more information about $CMON, see the Guardian Programmer’s Guide.
<system-name>.$SYSTEM.SYSnn.PWCONFIG:
Password configuration attribute PSWDUPPERCASEREQ
changed from ON to OFF
by <user name> at terminal <terminal name>
<system-name>.$ZSMP:
Password configuration token <token-name>
changed from T to F
by <user name> at terminal <terminal name>
Note. The EMS messages of PSWDUPPERCASEREQ,
PASSWORD-LOWERCASE-REQUIRED, PASSWORD-NUMERIC-REQUIRED,
PASSWORD-SPECIALCHAR-REQUIRED, PASSWORD-SPACES-ALLOWED, and
PASSWORD-MIN-QUALITY-REQUIRED atrributes are supported only on systems running
G06.31 and later G-series RVUs and H06.09 and later H-series RVUs.