🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: mod.computers.vax
Article #4028

Secure file access, and the BYPASS priv...

#4028
From: xrjjm%csdr.span
Date: Tue, 31 Mar 1987 16:20
26 lines
1938 bytes
Comment:   Begin User Supplied Mail Headers.
*Site:     NASA Goddard Space Flight Center - Greenbelt, Maryland, USA.
*From:     John J. McMahon, Systems Programmer, STX - ST Systems Corporation.
*Project:  COBE Science Data Room (CSDR), Code 401.1
*Reply-To: (Arpa-Internet)       XRJJM%CSDR.SPAN@JPL-VLSI.ARPA
*Reply-To: (Bitnet)              ZMJJM@SCFVM
*Reply-To: (Span/Physnet/Hepnet) 6173::XRJJM = CSDR::XRJJM (Node 6.29)
*Reply-To: (TEXnet)              UTADNX::UTSPAN::CSDR::XRJJM

Well, my first comment would be that BYPASS is not a secure privledge under
any condition...  It allows you to do something, regardless of the protections
set up on a file.

1) How do I prevent people from redefining SYS$SYSTEM ?
. Your routine could either DEASSIGN SYS$SYSTEM at startup, to prevent an
override, or set up your system so that the SYSTEM Logical name table is
checked prior to any users tables (or group tables).

2) How does user A & B access file F as if they were the same user ?
. Place an Access Control List on the file.

Hope this helps!
^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v
John J. McMahon (Fast-Eddie)                     
Disclaimer: Views expressed in this letter are my own, 
            and are not meant to represent the views of my employers.
Technical Details
Message-ID: <870331082042.012@Jpl-VLSI.ARPA>
Path: arc1-ca.pugleaf.net!utzoo!utgpu!water!watnot!watmath!clyde!cbatt!ucbvax!JPL-VLSI.ARPA!xrjjm%csdr.span

Show Full Headers
Complete Article Headers
Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: arc1-ca.pugleaf.net!utzoo!utgpu!water!watnot!watmath!clyde!cbatt!ucbvax!JPL-VLSI.ARPA!xrjjm%csdr.span
From: xrjjm%csdr.span@JPL-VLSI.ARPA.UUCP
Newsgroups: mod.computers.vax
Subject: Secure file access, and the BYPASS priv...
Message-ID: <870331082042.012@Jpl-VLSI.ARPA>
Date: Tue, 31-Mar-87 11:20:42 EST
Article-I.D.: Jpl-VLSI.870331082042.012
Posted: Tue Mar 31 11:20:42 1987
Date-Received: Fri, 3-Apr-87 04:22:30 EST
Sender: daemon@ucbvax.BERKELEY.EDU
Distribution: world
Organization: The ARPA Internet
Lines: 26
Approved: info-vax@sri-kl.arpa