Path: ...!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: =?UTF-8?Q?Arne_Vajh=C3=B8j?= <arne@vajhoej.dk>
Newsgroups: comp.os.vms
Subject: Re: Upcoming time boundary events
Date: Thu, 5 Jun 2025 09:10:45 -0400
Organization: A noiseless patient Spider
Lines: 31
Message-ID: <101s50l$1hlv8$1@dont-email.me>
References: <100fp4v$1nmtf$1@dont-email.me> <100omli$3t023$1@dont-email.me>
 <100qdop$6q13$1@dont-email.me> <100qg5t$3jb0$1@dont-email.me>
 <1014ad8$2jurh$1@dont-email.me> <101dnbj$omrq$1@dont-email.me>
 <mn.fae77e95a3bdb69b.104627@invalid.skynet.be>
 <101f0ei$1568p$1@dont-email.me>
 <mn.127a7e96667d7f35.104627@invalid.skynet.be>
 <mn.12887e9614a7408b.104627@invalid.skynet.be>
 <101k68r$39d9f$3@dont-email.me>
 <mn.1a747e96f898112d.104627@invalid.skynet.be> <101n4rj$34un$3@dont-email.me>
 <mn.226b7e96be736c6b.104627@invalid.skynet.be>
 <101qiik$13glj$4@dont-email.me>
 <mn.2a847e968448ca5d.104627@invalid.skynet.be>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Thu, 05 Jun 2025 15:10:46 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="f78ef932b1852ec372e50a62897ef5f1";
	logging-data="1628136"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX196IEwD2TqpiEmyvAuinsnDz30UkPAG374="
User-Agent: Mozilla Thunderbird
Cancel-Lock: sha1:TjHnksqa2ZOg5YhIHzrheDtxVNs=
Content-Language: en-US
In-Reply-To: <mn.2a847e968448ca5d.104627@invalid.skynet.be>
Bytes: 2839

On 6/5/2025 4:44 AM, Marc Van Dyck wrote:
> Lawrence D'Oliveiro laid this down on his screen :
>> On Wed, 04 Jun 2025 10:19:27 +0200, Marc Van Dyck wrote:
>>> Copy between nodes only allowed for specific accounts, and those
>>> accounts are audited by System Detective. That's an absolutely
>>> superb product.
>>
>> Basic security should be built into the core OS installation, not 
>> added as an afterthought -- and an extra-cost one at that.
> 
> There are already many security features available in OpenVMS. More than
> what many people need. There must be a trade-off. Building more stuff
> into the OS means that more customers pay for features they don't need.
> System Detective is a third party layered product offering features
> that I never needed before working in the finance industry. Like, for
> example, recording all the activity of specific user's interactive
> sessions, which is what we do for all privileged accounts.

https://pointsecure.com/products/system-detective/

sounds pretty advanced.

Way more than the basic:

$ SET HOST xxx /LOG=whatever.log

Can it be configured to not log (or x out) certain
sensitive information that should not be logged?

Arne