EGSC HPCC Help: Rules of Behavior for Users

Rules of Behavior for Users of the EGSC HPCC

Knowledge of Linux for SSH and Console Users

Users who use the EGSC HPCC by logging onto a login account through Secure Shell (SSH) or VNC and those with physical access to the HPCC who login at one of the consoles are responsible for being proficient Linux users before logging in to the HPCC. In particular, these users should understand how to traverse Linux filesystems and how to interpret, apply, and modify Linux permissions; and these users are responsible for applying permissions appropriate to protect their files from inadvertent or intentional access, alteration, or deletion by other users.

Backups

Under most circumstances users are not responsible for backing up files they create on the Worldly Node of the EGSC HPCC. Users are, however, responsible for backing up any important files they create on any of the work nodes. One way users may back up files from the work nodes is by moving files from their filespace on one or more work nodes to their file space (in the /home/userid directory) on the Worldly Node where files of under 50MB in size are backed up automatically by HPCC management on a daily basis and held for two years. Another option is for users to use FTP to move data from work nodes to one of the USGS enterprise FTP servers from which they can use FTP to move the data to other systems.

If a user has more than 500MB of data to be moved to the Worldly Node for backup on any particular day, the user should contact HPCC management to make special arrangements.

Cooperative Use of the HPCC

All users should act with due respect for the importance of the work of other users. Users should:

Ask HPCC management before installing any commercial, share-ware, or open-source software;
Use efficient procedures so the computational and communications resources of the HPCC can be used as much as possible for performing productive work;
Only perform approved work on the EGSC HPCC;
Set high nice levels (that is, low priorities) for lengthy jobs which are not time-sensitive; and
Regularly (at least weekly) clean out file space by deleting unneeded files and compressing seldom-used files.

In general, users should not use more than 10 GB of file space on any node without giving HPCC management advance notice.

Security

All users of the EGSC HPCC are responsible for knowing and following the USGS security requirements which apply to the EGSC HPCC. A general summary of these user responsibilities may be found in Department of the Interior Departmental Manual Part 375 Chapter 19 [ 375 DM 19 ] :

N. Users of IT resources are accountable for all activity performed under their unique User ID. Additionally, they are responsible for:

Complying with all security requirements pertaining to the IT resources they utilize;
Keeping current on IT security policies and guidelines;
Keeping their password to themselves;
Protecting IT systems and information from hazards;
Restricting access to information to authorized users;
Ensuring that information is backed-up and securely stored, preferably by using appropriate LAN servers.
Protecting themselves and others from computer viruses;
Using only authorized software;
Logging off and locking up;
Knowing the cost (risk) of compromised or lost information;
Reporting security incidents immediately; and
Reporting to their supervisor or IITSM any condition or event that might represent a possible breach of system security.

The full text of 375 DM 19 is available on the WWW at:

http://elips.doi.gov/app_DM/act_getfiles.cfm?relnum=3397

Detailed information on "USGS Information Technology (IT) Security" is available on the USGS Intranet at:

http://internal.usgs.gov/gio/security/

The following additional security requirements apply to all users of the EGSC HPCC:

Users must not access the EGSC HPCC from a workstation connected to any network which contains one or more wireless routers or switches;
Those who use an agent with Secure Shell to allow logins without specifying passwords on each connection must encrypt their keys.
Users who access the EGSC HPCC from a public workstation (such as a computer in a university lab, a telecommuting facility, or a hotel work room) must delete the browser cache and history and close the browser before leaving the workstation.
Users must keep their personal workstations and browsers up-to-date, patched, and physically secure.
Users should properly terminate their work sessions by correctly logging out of EGSC HPCC applications in order to maintain complete and accurate records of their online work in the HPCC log files.
Each user must maintain at least general familiarity with this Users� Guide and any application-specific documentation available for applications to which the user has access.