|
|
|
____________________
|
|
|
|
Joint Astronomy Centre
Joint Astronomy Centre
Computing Services Group
15 January, 2002
JAC COMPUTING POLICIES AND PROCEDURES
1. Philosophy
The computing environment at the JAC is fundamentally an open, trusted local network. Accordingly, the computing policies are designed to promote maximal ease of use, while providing reasonable security against both external and internal threats. Threats can be either intentional (i.e., network attacks, malicious destruction of data, etc.) or inadvertent (i.e., system crashes, network failures, etc.) - in any case, the security policy endeavors to
- prevent threats from having negative impact on computing services,
- detect attempted attacks or imminent inadvertent threats, and
- recover from any successful attacks or failures.
2. Objectives
The specific goals of the computing policies and procedures are (in an approximate priority order):
- Ensure the availability and integrity of the operational (UKIRT and JCMT telescope control and data acquisition) computing systems, software, and observational data.
- Ensure the availability and integrity of astronomical data reduction and analysis systems, software, and data.
- Ensure the availability and integrity of general-use computing systems, software, and data.
- Provide for rapid recovery if systems are damaged or compromised as a result of a malicious or inadvertent incident.
- Ensure the confidentiality of JAC management data, observational and users' data files as required.
- Prevent accidental or malicious damage to systems, software, and data.
3. Implementation
A. Policies on Guidelines
All users of JAC computing systems, including visiting observers, are required to read and sign the Acceptable Use Policy. Special-access (i.e., root or special support) users are required to read, receive training on, and sign the Special Access Guidelines. The policies are included in this document.
B. Procedures
Computing is a rapidly evolving field and so it is accepted that the precise details of the JAC computing procedures are extremely dynamic. However, they are based on a few fairly fixed tenants, which can be summarised as follows:
- System backups of all operational systems are taken daily. The exact details of the JAC backup strategy are given in the JAC Backup policy. If the systems are damaged or compromised, they can be restored to a known state, provided System Administrators are alerted within 30 days of the problem occurring.
- An incident response procedure exists to deal with both internal and external threats. This covers deliberate attacks as well as inadvertent system failures, and details the steps to be taken for recovery.
- Various logging, auditing, and verification software systems are installed to detect, or at least document, any external attacks on JAC systems. An ongoing effort is made to distill the logs and reports into a form that gives early warning of any problems.
- Redundant disk arrays, redundant hardware and other technological solutions are used to minimize downtime in the event of hardware failures.
JAC Computing Services - Acceptable Use Policy
Policy
JAC computer users may use the JAC computing systems for any legal and ethical purpose that does not interfere with the business mission, professional reputation or security of the JAC. Computer files on JAC systems that are protected by the appropriate operating system mechanisms will remain strictly private to the user unless authorized by the user or by direct action of the Director of the JAC. Users are responsible for setting the appropriate protection on their files. Notwithstanding the above, the computer systems and all data on them are the property of the JAC and the JAC reserves the right to examine any data stored on the JAC computer systems.
Explanatory notes
These notes provide guidelines for use of the JAC computing systems and resources. They are intended to increase awareness of computer security issues and to ensure that all JAC users (scientific users, support personnel and management) use the JAC computing systems, resources and facilities in an efficient, ethical and lawful manner.
Examples of activities which would be considered to interfere with the JAC's business mission, professional reputation or security are:
- Using large amounts of system resources for purposes unrelated to the JAC, and to the detriment of other users.
- Divulging any access information (e.g. login passwords, passwords to any protected system areas or resources, dialup phone numbers, or lists of user accounts), without prior authorization of JAC Computing Services.
- Failing to report any weaknesses in JAC computer security, or any incidents of illegal use of JAC computing resources, to the proper authorities by contacting JAC Computing Services or by sending electronic mail to sysadmins@jach.hawaii.edu.
- Sharing a personal JAC account. This includes sharing the password to the account, providing access via an .rhosts entry or other means of sharing.
- Down-loading, or making unauthorized copies of copyrighted material, except as permitted by law or by the owner of the copyright. If in doubt, JAC Computing Services should be consulted.
- Making copies of system configuration files for unauthorized personal use or to provide to other people/users for unauthorized uses.
- Engaging in activities to: harass other users; degrade the performance of systems; deprive an authorized JAC user access to a JAC resource; obtain extra resources, beyond those allocated; circumvent JAC computer security measures or gain access to a JAC system for which proper authorization has not been given.
- Sending from, down-loading, storing or printing on JAC systems any fraudulent, harassing or obscene messages and/or materials.
- Down-loading, installing or running security programs or utilities which reveal weaknesses in the security of a system.
- Down-loading, installing or running any executable programs which are not licensed for use at the JAC or adversely effect system performance or provide a security threat. In general, JAC Computing Services should be informed before you down-load software, and they should always be consulted if there is any doubt.
- Activating any network services (WWW servers, FTP servers, etc.) on any JAC computers without the permission of JAC Computing Services.
Any noncompliance with these requirements will constitute a security violation that may result in disciplinary action by the management of the JAC, which could include short-term or permanent loss of access to JAC computing systems. Serious violations may result in civil or criminal prosecution.
I have read and understand the Acceptable Use Statement for use of the JAC computing facilities and agree to abide by it.
Computer User's Name: _______________________________
User's Signature: _____________________________________ Date: ___________________________
JAC Computing Services - Acceptable Use Policy
Special Access Guidelines
Definition
Special access is defined as having been given permission to use any account that has access to elevated operating system privileges, including the ability to use any program to obtain temporary elevated privileges (other than to simply shut down a system).
Guidelines
If you have special access privileges you are still bound by the Acceptable Use Policy at all times. What you do must be legal and ethical, you must not interfere with the business mission, professional reputation or security of the JAC and you must not read other peoples files without the explicit permission of either the owner or the Director of the JAC.
Having said this, the following specific guidelines should be adhered to:
- Be aware of the JAC environment
. The JAC facility is a highly specialized, complex and dynamic facility containing a large number of computers of different configurations. Due to the number and variety of computers and peripherals, special access must be granted to numerous people so the JAC facility can be properly supported. People with special access must develop the proper skill for using that access responsibly. Many daily system tasks have been automated by the use of software tools. Be aware of the "JAC Way" of doing system tasks.
- Always log on to systems as yourself and then use temporary elevated privileges where possible.
Any action done under a special access account should have an audit trail. When possible (i.e. on systems where you have a personal account) log into a system using your own account and then perform the actions using an audited facility (e.g. on Unix use the 'sudo' utility, and do not su to a privileged account if at all possible).
- Use special access only if necessary.
There are many tasks that can be done without the use of special access. When at all possible use regular accounts and privileges for trouble-shooting and investigating.
- Do not browse other users' files, directories or E-mail using a special access account.
A special access account often allows you to read protected files. The Acceptable Use Policy forbids this without explicit permission of the file's owner or the Director of the JAC. However, much of the legitimate use of special access is to clear permission problems. Files are considered to be owned by a user only if they are in their home directory tree (or similar private directory of the VMS systems or PC systems), or in system spool directories and other similar places. If, for example, they are on a shared software partition the permissions can be changed.
- Document all major actions and/or inform appropriate people.
Documentation provides a method to analyze what happened. In the future, others may want to know what was done to correct a certain problem. If possible, a System Administrator should be informed before any changes are made to system specific or configuration files. If not, they should be informed immediately thereafter.
- Have a backup plan in case something goes wrong.
Special access has a large potential for doing damage with just a few keystrokes. Develop a backup plan in case something goes wrong. You must be able to restore the system to its state before the error occurred.
- Know whom to turn to if problems arise.
With the use of special access, situations arise that have never come up before. Although JAC has many written procedures, they do not cover every circumstance possible. If any doubt exists about how you should proceed on a problem, then ask for assistance. Know who to ask.
- Do not make a change on any system that is not directly related to your job duties.
You have special access privileges for a reason. Bear this in mind.
I have read the above guidelines and received an explanation of them. I will use special access in accordance with JAC guidelines and policies.
Special Access User's Name: _______________________________
User's Signature: _____________________________________ Date: ___________________________
|
|
