IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Read only (Ro): The file may only be read. Write access is not possible.
To avoid data loss during simultaneous use, these files should also possess
the "Shareable" (S) Attribute.
Executable program files (*.exe, *.com) should be given the "Read only"
Attribute to prevent a possible computer-virus attack.
Shareable (Sh): These files can simultaneously be used by many users.
Files that have been given the "Shareable" Attribute should also possess
the "Read Only" Attribute. The "Shareable" Attribute is only relevant for
programs that open files in a non-networkable mode.
Hidden (H): The file will be labelled as hidden; it will not show up in a
contents list under DOS, neither can it be copied or deleted. I
System (Sy): This file is used by the network operating system; it will not
show up in a contents list under DOS, neither can it be copied or deleted.
Transactional (T): Files with this attribute are subject to transaction
control from Novell Netware. Transaction, in this context, means a series
of changes in one or more files. Installing this attribute causes only
completely executed transactions to be taken over by the data contained in
the file. Transactions that have been interrupted before they were
completed will be undone by Novell Netware.
Purge (P): Files with the "Purge" Attribute will, when deleted, not only be
immediately logically deleted, but also physically. The consequence being
that the file cannot be restored. In this context it must be mentioned that a
physical deletion of files can not only be achieved by the use of the
attribute purge but also with the command "PURGE filename".
Copy Inhibit (Ci): Files of this type cannot be copied. However, this
Netware Attribute is only designed for APPLE Macintosh workstations.
Delete Inhibit (Di): The file cannot be deleted.
Rename Inhibit (Ri): The file cannot be renamed.
Don't Migrate (Dm): The file is not to be transferred to a secondary data
medium (e.g. tape drive).
Immediate Compress (Ic): The file will immediately be compressed by
the operating system and then stored on the volume.
Don't Compress (Dc): The file is not compressed by the operating system,
even if compression is enabled for the volume.
Don't Suballocate (Ds): When storing this file no suballocation will be
carried out. Even if this feature is enabled on the system.
File Compressed (Co), Can’t Compress (Cc), File Migrated (M): With
these attribute, corresponding information about a file is stored by the
operating system. These attributes can only be changed by the operating
system.
Careful allocation of rights
File rights, NDS object rights and NDS object property rights are completely
independent. There are two exceptions to this: If users receive supervisor
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000