Article View: comp.security.misc
Article #437Re: Security Policy
From: Haakon Styri
Date: Fri, 21 Aug 1992 08:24
Date: Fri, 21 Aug 1992 08:24
19 lines
1412 bytes
1412 bytes
In article <66496@hydra.gatech.EDU>, Danny McGurl writes: > > This brings up an interesting question. Where does a sysadmin's > action become unethical and/or illegal. Is it wrong for a sysadmin > to log the mail and not look at it unless they are presented with > a reasonable suspicion (or evidence of a crime)? This shouldn't be too difficult to answer. One way is to treat it as an ordinary telephone tap. Different countries will have different laws for doing this. Another way, probably better, is to treat it as a backup. If you tell the users, probably by including this in a policy statement that should be signed by each user, it's ok. (Reading the log, however, is not. The log is there "in case something should happen".) If the computer system in question is a public facility you may have other regulations limiting your actions. --- Haakon Styri *** std. disclaimer applies ***
Technical Details
Message-ID:
<1992Aug21.082446.29014@nntp.nta.no>Path:
arc1-ca.pugleaf.net!sparky!uunet!mcsun!sunic!aun.uninett.no!nuug!nntp.nta.no!hal.nta.no!styriReferences:
<3748@wzv.win.tue.nl> <BtB4vu.JDB@solbourne.com> <66496@hydra.gatech.EDU>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sunic!aun.uninett.no!nuug!nntp.nta.no!hal.nta.no!styri From: styri@hal.nta.no (Haakon Styri) Subject: Re: Security Policy Message-ID: <1992Aug21.082446.29014@nntp.nta.no> Lines: 20 Sender: news@nntp.nta.no Nntp-Posting-Host: balder.nta.no Reply-To: styri@nta.no Organization: Norwegian Telecom Research References: <3748@wzv.win.tue.nl> <BtB4vu.JDB@solbourne.com> <66496@hydra.gatech.EDU> Date: Fri, 21 Aug 92 08:24:46 GMT