🚀 go-pugleaf

>From:    J|rgen Olsen <masjol@dou.dk>
>RE: LAN's as vehicle for spreading virii!
>This is mainly a question of network management.

Agreed, but one easy possibility does not seem to have been covered that
is widely used on BBSes: separate upload and download directories.

By making the upload directory write only for users and the download
directory execute only, the administrator can provide an effective
filter of what is made available to the community.

Of course this places added responsibility on the administrator since
a problem is traceable to him (I wonder if this is why many manufacturers
ship products on non-write-protected disks, there is not much question of
where an infection occurred with a notchless disk), and does introduce
a delay between posting and availability.

Such a scenario would have user A posting a file to the upload directory.
The administrator would then SCAN the program, check  for malicious
behavior using an account that is unpriv'd, and check for any license
restrictions.

Only when satisfied that the program is low-risk would it be placed in a
user-accessable area.

Such a filter should also be used between software developers and user
areas (but rarely is). In practise, the technique is much simpler than
it sounds and need not be a burden.

						Padgett
			It works for me