🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #437

Re: Security Policy

#437
From: Haakon Styri
Date: Fri, 21 Aug 1992 08:24
19 lines
1412 bytes
In article <66496@hydra.gatech.EDU>, Danny McGurl writes:
>
> This brings up an interesting question.  Where does a sysadmin's
> action become unethical and/or illegal.  Is it wrong for a sysadmin
> to log the mail and not look at it unless they are presented with
> a reasonable suspicion (or evidence of a crime)? 

This shouldn't be too difficult to answer. One way is to treat it as an
ordinary telephone tap. Different countries will have different laws for
doing this. Another way, probably better, is to treat it as a backup.
If you tell the users, probably by including this in a policy statement
that should be signed by each user, it's ok. (Reading the log, however,
is not. The log is there "in case something should happen".)

If the computer system in question is a public facility you may have
other regulations limiting your actions.

---
Haakon Styri		*** std. disclaimer applies	***
Technical Details
Message-ID: <1992Aug21.082446.29014@nntp.nta.no>
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sunic!aun.uninett.no!nuug!nntp.nta.no!hal.nta.no!styri
References: <3748@wzv.win.tue.nl> <BtB4vu.JDB@solbourne.com> <66496@hydra.gatech.EDU>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sunic!aun.uninett.no!nuug!nntp.nta.no!hal.nta.no!styri
From: styri@hal.nta.no (Haakon Styri)
Subject: Re: Security Policy
Message-ID: <1992Aug21.082446.29014@nntp.nta.no>
Lines: 20
Sender: news@nntp.nta.no
Nntp-Posting-Host: balder.nta.no
Reply-To: styri@nta.no
Organization: Norwegian Telecom Research
References: <3748@wzv.win.tue.nl> <BtB4vu.JDB@solbourne.com> <66496@hydra.gatech.EDU>
Date: Fri, 21 Aug 92 08:24:46 GMT