Security Policy

Thread View: comp.security.misc

4 messages

[T] Back to Threads [V] Tree View [G] Group Articles

4 total messages Started by Philip Green Wed, 19 Aug 1992 19:51

#423

Author: Philip Green
Date: Wed, 19 Aug 1992 19:51

10 lines
764 bytes

I am in the process of creating a security policy for our
organization. I am interested in see what others have done 
and what you may or may not have learned from it. If anyone
has a Security Policy I could have a copy please let me 
know.

Thanks
-- 
Phil Green                           	pgreen@aoc.nrao.edu
NRAO					505.835.7294

Re: Security Policy

#424

Author: Dave Grisham
Date: Wed, 19 Aug 1992 22:53

3 lines
475 bytes

Some security policies and many ethics policies may be found
by ftping to ariel.unm.edu  directory is ethics.
grish

Re: Security Policy

#432

Author: Rob J. Nauta
Date: Thu, 20 Aug 1992 21:02

26 lines
1773 bytes

Why not just use the good old fascist method ? It's used by 90% of
the sites connected, so it's been proven to be effective (although not
very satisfactory for the users).
In general, start out with no rules. If someone offends or annoys the
operator (detection is based on luck/chance), a punishment is found,
based on a whim, the mood of the operator at the moment, etc.
Don't bother with letting the user explain why he ran the 'crontab'
command, if he knows how it works, he's obviously a hacker, and you'd
better shut them up. Ridiculize the offender in public, eg. if he
uses too many diskspace, or uses ftp too much, remind users in the
/etc/motd to be careful with ftp'ing GIF's, or they will end up
as J. Random User, who lost his account for using the company's system
for collecting pornography.

Right now, you must think I'm crazy, that nobody has this system.
Well, you are wrong, most system admins start out this way, with
no written rules, rules that are hastily created and applied to cover
past actions. The EFF can tell you thousands of stories, collected
from people who lost their account on a whim of the mighty root.

Rob
-- 
/-----------------------------------------------\	Never		   ,==.
| Rob J. Nauta, UNIX computer security expert.	| 	 Apologize,	  /@  |
| rob@wzv.win.tue.nl, Phone: +31-40-837549	| 	  Never		 /_  <
| Feel free to email me for free advice		|	   Explain.	=" `g'

Re: Security Policy

#433

Author: Warner Losh
Date: Fri, 21 Aug 1992 00:19

14 lines
909 bytes

In article <3748@wzv.win.tue.nl> rob@wzv.win.tue.nl (Rob J. Nauta) writes:
>Right now, you must think I'm crazy, that nobody has this system.

You are right.  I've seen this at many places.  My brother never tires
of telling me the latest stupid behaviour by the system admins at his
school.  It is completely revolting.

Oh, you forgot to add "hacking sendmail.cf so that root gets a copy of
all off site mail" to the list of things that they do :-(

Warner
-- 
Warner Losh		imp@Solbourne.COM
I've almost finished my brute force solution to subtlety.

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads