[Info-vax] VMS and security

[Simon Clubley]

On 2022-11-07, <kemain.nospam at gmail.com> <kemain.nospam at gmail.com> wrote:
>
>> -----Original Message-----
>> From: Info-vax <info-vax-bounces at rbnsn.com> On Behalf Of Simon Clubley
>> via Info-vax
>> Sent: Thursday, November 03, 2022 10:42 AM
>> To: info-vax at rbnsn.com
>> Cc: Simon Clubley <clubley at remove_me.eisner.decus.org-Earth.UFP>
>> Subject: [Info-vax] VMS and security
>> 
>> Unfortunately, the idea of VMS security somehow being comparable to
>> today's expected security standards is utterly delusional.
>> 
>> Even Linux is _far_ in advance of what VMS offers.
>> 
>> For example, Linux has mandatory access controls and VMS is still stuck
> back
>> in the DAC world.
>> 
>> There's no ASLR/KASLR support on VMS.
>> 
>> There's nothing like the Unix chroot jails on VMS.
>> 
>> Compiler protections in generated code has been lacking on VMS compared
>> to what is available elsewhere, but John in recent years has started
> looking at
>> getting comparable protections in the VMS compilers, when it comes to
>> generating code, that currently exist elsewhere.
>> 
>> Back in the 1980s/early 1990s, VMS was a leader in security and it has
> proudly
>> remained there while the rest of the world has moved on.
>> 
>> Simon.
>> 
>
> For those looking for additional security than what the base OpenVMS OS
> provides, they can always add 3rd party products like those from
> PointSecure.
>
> Reference: System Detective
><https://pointsecure.com/products/system-detective/>
>

How well does PointSecure handle the above items in my list ?

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.