Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!utgpu!water!watmath!clyde!rutgers!mit-eddie!uw-beaver!ubc-vision!van-bc!nvanbc!lawrenc
From: lawrenc@nvanbc.UUCP
Newsgroups: comp.os.vms
Subject: Re: Using callable EDT (caveat for installed prog. w/ privs)
Message-ID: <510@nvanbc.UUCP>
Date: Thu, 3-Dec-87 12:21:13 EST
Article-I.D.: nvanbc.510
Posted: Thu Dec  3 12:21:13 1987
Date-Received: Thu, 10-Dec-87 01:02:49 EST
References: <8712020650.AA10361@ucbvax.Berkeley.EDU>
Reply-To: lawrenc@nvanbc.UUCP (Lawrence Harris)
Organization: L.H. Computing
Lines: 31
Keywords: VMS, privileges

In article <8712020650.AA10361@ucbvax.Berkeley.EDU> PHULVER%OCVAXA@VB.CC.CMU.EDU (Barron Hulver x8290) writes:
>Just a tidbit of information for anyone using the callable
>EDT interface.  If the program will ever be an installed image
>with privileges (SYSPRV, BYPASS), this is not the way to go.
>
>A user will be able to drop into the editor, then INCLUDE
>any text file on the system.
>
>In this case you do want to use the LIB$SPAWN feature.
>
>...Barron Hulver          (216)  775-8290
...
>   (you can send mail to postmaster instead of phulver)
This may is true, however if its important to you then just turn off any
priv's you don't need first and turn then back on when you return from
EDT (or TPU or DTR or any other callable utility.)  Don't cripple your
system by doing unecessary LIB$SPAWN's just because you are running a program
with installed priv's.

Something we do here fairly frequently is to disable all privileges when
you start running a program and then only turn them on during the operation
you need them for.  This allows a program to have a /OUT= qualifier and
BYPASS but not let the user write over SYSUAF.DAT since we don't turn
BYPASS on except for the one time we use it.


-- 
------------------------------------------------------------------------------
UUCP:  {ihpn4!alberta,uw-beaver}!ubc-vision!van-bc!nvanbc!lawrence
SNAIL: 733 Sylvan Ave., North Vancouver, B.C., Canada, V7R 2E8
PHONE: 1-604-736-9241 (09:00-17:00 PST) 1-604-420-9518 (after 17:00 PST)