IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
System (Sy): The directory (e.g. SYS:SYSTEM\DELETED.SAV) is used by
the system; it will not show up in a contents list under DOS, it can neither
be copied nor deleted.
Rename Inhibit (R): The directory cannot be renamed.
Delete Inhibit (D): The directory cannot be deleted.
Purge (P): When deleting, the directory and the files contained therein will
immediately be physically deleted. Restoring the directory with the help of
SYS:\PUBLIC\SALVAGE.EXE is not possible.
- File Attributes:
Read write (Rw): Read and write access to the file is possible.
Read only (Ro): The file may only be read. Write access is not possible.
To avoid data loss during simultaneous use, these files should also possess
the "Shareable" (S) Attribute.
Executable program files (*.exe, *.com) should be given the ”Read only”
Attribute to prevent a possible computer-virus attack.
Shareable (S): These files can simultaneously be used by many users.
Files that have been given the ”Shareable” Attribute should also possess
the ”Read Only” Attribute. The "Shareable" Attribute is only relevant for
programs that open files in a non-networkable mode.
Purge (P): Files with the ”Purge” Attribute will, when deleted, not only be
immediately logically deleted, but also physically. The consequence being
that the file cannot be restored. (SYS:PUBLIC\SALVAGE.EXE).
In this context, it must be noted that the physical deletion of a file can be
brought about not only by the "Purge" Attribute. If secure deletion of
directories and files is required, the Netware program
SYS:PUBLIC\PURGE.EXE can be installed for this purpose.
Transactional (T): Files with this attribute are subject to transaction
control from Novell Netware. Transaction, in this context, means a series
of changes in one or more files. Installing this attribute causes only
completely executed transactions to be taken over by the data contained in
the file. Transactions that have been improperly interrupted will be undone
by Novell Netware.
Archive needed (A): The contents of files labelled thus by Novell Netware
have been changed or reinstalled since the last backup. With a sequential
backup, data backup software can recognise that the file must be backed up
again.
Copy Inhibit (C): Files of this type cannot be copied. However, this
Netware Attribute is only designed for APPLE Macintosh workstations.
Delete Inhibit (D): The file cannot be deleted.
Rename Inhibit (R): The file cannot be renamed.
Execute Only (X): Executable program files (*.EXE, *.COM) which have
been allocated with this attribute may only be executed or deleted. Copying
of the file is not possible.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000