Security Management Guide (G06.29+, H06.08+, J06.03+)

Guardian System Security
Security Management Guide — 522283-021
2 - 24
Licensing Programs
For more information, see Licensing Programs on page 2-24.
Setting PROGID to Super ID
The super ID must set PROGID for programs that need to run under the super ID.
Examples of this strategy are given for BACKUP and INSTALL earlier in this section.
For more information, see PROGID Programs on page 2-28.
Initializing NonStop SQL/MP
The super ID is needed to initialize HP NonStop SQL/MP and to reinitialize subsequent
RVUs.
Controlling User IDs
The super ID is needed to add new user groups or to add user IDs to administrative
groups that do not have a group manager ID.
The super ID is also needed to delete user IDs from administrative groups that do not
have a group manager ID.
Responding to System Emergencies
In an emergency, the super ID might be needed to resolve problems. For example, the
super ID is needed to debug or inspect privileged code.
Licensing Programs
Only the super ID can license a program or revoke its license. However, the initial
licensing of system programs is done automatically by the INSTALL program running
as the super ID.
Privileged Operations
Privileged operations are operations reserved for use by the operating system.
Licensing a program has the effect of giving the program the privileges of the operating
system. When a licensed program runs, privileged operations in it can bypass any
ordinary security interface (such as authentication of user IDs and
memory-management protection).
Caution. As a general rule, do not license user programs. Doing so can seriously compromise
system security and integrity. If you must license user programs, be sure to read
Administrative
Procedures on page 2-26.