🚀 go-pugleaf

In article <12270@netnews.upenn.edu> pakman@scrolls.wharton.upenn.edu (David B. Pakman) writes:
>I have heard that someone at the University of Michigan has created
>a version of Vaccine that is un-defeatable.  Has anyone heard about
>such a utility?  I am thinking in terms of public labs where we don't
>want users disabling the protection of Vaccine or overriding 
>gatekeeper.
>

  I should first point out that there are two factions here at the University
of Michigan; the Computing Center, which serves the general student population,
and CAEN, which serves the Engineering school.  The two have little to do
with each other; they have different policies, consultants, etc.  As a result,
we have two modifed versions of Vaccine here at U-M.
  The CC version has the cdev code totally removed, and the 'Granted' button
has been moved outside the visible area of the dialog box, so the user has no
choice but to click 'Denied'.  This method has some obvious problems, the first
being that people who write programs cannot use CC machines, since there is
no way to add CODE resources into the application.  The second is that the
removal of the cdev resource causes problems with Disinfectant, as documented
in that program.
  The CAEN version has its file type changed to INIT, so the cdev will not show
up in the Control Panel (which was why CC removed the cdev code), but we did
not modifiy the dialog.  While this is less secure than CC's version, our
version does not have problems with Disinfectant, and people who write programs
can add resources to their applications.
  Note that neither version is "undefeatable".  We have just made it harder
to turn off Vaccine.  A user can still boot off his own floppy which might not
have Vaccine on it.  The most we can do in this case is to discourage this.
CAEN's machines are reloaded each week to keep the chance of an infestation
down.
  
_______________________________________________________________________________
Dean Yu                            | E-mail: mystone@{sol,caen}.engin.umich.edu
University of Michigan             | Real-mail: Dean Yu
Computer Aided Engineering Network |            909 Church St
===================================|            Apt C
"These are MY opinions." (My       |            Ann Arbor, MI 48104
 employer doesn't want them.       |===========================================
 Actually, they don't really care  | 
 what I think.  But President      |   This space intentionally left blank.  
 Duderstadt does...)               | 
-------------------------------------------------------------------------------