Article View: mod.computers.vax
Article #4028Secure file access, and the BYPASS priv...
From: xrjjm%csdr.span
Date: Tue, 31 Mar 1987 16:20
Date: Tue, 31 Mar 1987 16:20
26 lines
1938 bytes
1938 bytes
Comment: Begin User Supplied Mail Headers.
*Site: NASA Goddard Space Flight Center - Greenbelt, Maryland, USA.
*From: John J. McMahon, Systems Programmer, STX - ST Systems Corporation.
*Project: COBE Science Data Room (CSDR), Code 401.1
*Reply-To: (Arpa-Internet) XRJJM%CSDR.SPAN@JPL-VLSI.ARPA
*Reply-To: (Bitnet) ZMJJM@SCFVM
*Reply-To: (Span/Physnet/Hepnet) 6173::XRJJM = CSDR::XRJJM (Node 6.29)
*Reply-To: (TEXnet) UTADNX::UTSPAN::CSDR::XRJJM
Well, my first comment would be that BYPASS is not a secure privledge under
any condition... It allows you to do something, regardless of the protections
set up on a file.
1) How do I prevent people from redefining SYS$SYSTEM ?
. Your routine could either DEASSIGN SYS$SYSTEM at startup, to prevent an
override, or set up your system so that the SYSTEM Logical name table is
checked prior to any users tables (or group tables).
2) How does user A & B access file F as if they were the same user ?
. Place an Access Control List on the file.
Hope this helps!
^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v^v
John J. McMahon (Fast-Eddie)
Disclaimer: Views expressed in this letter are my own,
and are not meant to represent the views of my employers.
Technical Details
Message-ID:
<870331082042.012@Jpl-VLSI.ARPA>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!water!watnot!watmath!clyde!cbatt!ucbvax!JPL-VLSI.ARPA!xrjjm%csdr.spanShow Full Headers
Complete Article Headers
Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: arc1-ca.pugleaf.net!utzoo!utgpu!water!watnot!watmath!clyde!cbatt!ucbvax!JPL-VLSI.ARPA!xrjjm%csdr.span From: xrjjm%csdr.span@JPL-VLSI.ARPA.UUCP Newsgroups: mod.computers.vax Subject: Secure file access, and the BYPASS priv... Message-ID: <870331082042.012@Jpl-VLSI.ARPA> Date: Tue, 31-Mar-87 11:20:42 EST Article-I.D.: Jpl-VLSI.870331082042.012 Posted: Tue Mar 31 11:20:42 1987 Date-Received: Fri, 3-Apr-87 04:22:30 EST Sender: daemon@ucbvax.BERKELEY.EDU Distribution: world Organization: The ARPA Internet Lines: 26 Approved: info-vax@sri-kl.arpa