Cisco CISCOWORKS COMMON SERVICES 3.0, Руководство пользователя

Страница: 265 / 286

A-3
User Guide for CiscoWorks Common Services
78-16571-01
Appendix A Understanding CiscoWorks Security
Server Security
• Remote Connectivity
• Access to Systems Other Than the CiscoWorks Server
•
Access Control
Files, File Ownership, and Permissions
The following describes the file ownership and permissions.
•
UNIX Systems—CiscoWorks must be installed by a user with root privilege.
It should be installed as the user, casuser with a casusers group. If the system
administrator needs to work on causer files, a user with a name chosen by the
system administrator, must be created and added to the causers group.
All files and directories are owned by casuser with group equal to casusers.
Temporary files are created as the user casuser with permissions set to
read-write for the user casuser and read for members of group casusers.
The only exception to this rule is the log files created by the CiscoWorks web
server and diskwatcher. The CiscoWorks web server and diskwatcher must be
started as root. Therefore, their log files are owned by the user root with
“group=casusers.”
•
Windows Systems—CiscoWorks must be installed by the administrator and
must be installed as the user casuser.
– If it is a new installation, the system displays a Yes/No message
prompting you to either create or to cancel the process. You can enter the
password or can be generated.
–
If it is not a new installation, the system displays a Yes/No message
prompting you to either continue resetting the password or to retain the
old password.
The CiscoWorks Server uses the password but the casuser user is never
intended as a general user of the Windows system. No user is required to log
on the Windows system as casuser.
All files and directories are owned by the user casuser. Read and write access
are restricted to the user casuser and the administrator. Temporary files are
created as the user casuser with permissions set to read-write for the user
casuser.