Article View: comp.sys.dec
Article #5405Re: Installing privileged images
From: Bruce Wright
Date: Thu, 01 Jun 1989 03:32
Date: Thu, 01 Jun 1989 03:32
45 lines
2806 bytes
2806 bytes
In article <729@orbit.UUCP>, glamdrng@pnet51.cts.com (Rocky Lhotka) writes:
> Does anyone know how to install an image requiring WORLD privs? I have a
> program which runs fine from my account (with WORLD) and is installed with
> /PRIV=WORLD/OPEN/HEAD/SHARE but when run from a non-privileged account it does
> not function... Thanks in advance for any help!!
I assume you mean on VMS ... anyway. If you have installed the image as
shown above, then it should work (give you WORLD privilege when it's run).
However, there are a few things you need to watch out for:
1. The image may need things besides WORLD. For example, NETMBX and
TMPMBX are very popular privileges (lots of programs break if they
don't have them). Some installations don't give the low-level
users even NETMBX and TMPMBX. Likewise, there may be other
privileges you have that the program is taking advantage of without
your knowledge. Suggest you do SET PROCESS /PRIV=(NOxxx, NOyyy, ...)
(where xxx and yyy and ... are your various privileges), eliminating
your privileges one-by-one until you find the minimal set that the
program will run with. Then install the program with those privs.
2. Likewise, it may need additional quota.
3. Also, it may be trying to access protected objects. WORLD doesn't
give you access to all the files on the system (for example), it
just lets you manipulate all the processes on the system. You could
also try the elimination process described on #1 by installing it
with all possible privileges and cutting them down to find the
minimum set. This isn't as bad as it seems since you can usually
chop double handfulls of them at a time for the first few cuts.
NOTE: This exercise is not *quite* the same as the one above
because you are running on a different UIC and have a
different rightslist.
4. You may also need to check whether the program does anything that
is implicitly qualified by all or part of the UIC - such as
attaching to a group global event flag cluster. Running the
program on a different UIC, you might have enough privilieges but
be trying to attach to objects that just don't exist.
These are just a few random thoughts ... perhaps you could describe
exactly what error messages you get from the program and the sort of
thing it's trying to do (this might help focus the problem determination
somewhat).
Bruce C. Wright
Technical Details
Message-ID:
<2993@rti.UUCP>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!mcnc!rti!bcwReferences:
<729@orbit.UUCP>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!rutgers!mcnc!rti!bcw From: bcw@rti.UUCP (Bruce Wright) Newsgroups: comp.sys.dec Subject: Re: Installing privileged images Summary: Privileges & VMS Message-ID: <2993@rti.UUCP> Date: 1 Jun 89 03:32:01 GMT References: <729@orbit.UUCP> Organization: Research Triangle Institute, RTP, NC Lines: 45