Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!utgpu!water!watmath!clyde!rutgers!mit-eddie!uw-beaver!ubc-vision!van-bc!nvanbc!lawrenc From: lawrenc@nvanbc.UUCP Newsgroups: comp.os.vms Subject: Re: Using callable EDT (caveat for installed prog. w/ privs) Message-ID: <510@nvanbc.UUCP> Date: Thu, 3-Dec-87 12:21:13 EST Article-I.D.: nvanbc.510 Posted: Thu Dec 3 12:21:13 1987 Date-Received: Thu, 10-Dec-87 01:02:49 EST References: <8712020650.AA10361@ucbvax.Berkeley.EDU> Reply-To: lawrenc@nvanbc.UUCP (Lawrence Harris) Organization: L.H. Computing Lines: 31 Keywords: VMS, privileges In article <8712020650.AA10361@ucbvax.Berkeley.EDU> PHULVER%OCVAXA@VB.CC.CMU.EDU (Barron Hulver x8290) writes: >Just a tidbit of information for anyone using the callable >EDT interface. If the program will ever be an installed image >with privileges (SYSPRV, BYPASS), this is not the way to go. > >A user will be able to drop into the editor, then INCLUDE >any text file on the system. > >In this case you do want to use the LIB$SPAWN feature. > >...Barron Hulver (216) 775-8290 ... > (you can send mail to postmaster instead of phulver) This may is true, however if its important to you then just turn off any priv's you don't need first and turn then back on when you return from EDT (or TPU or DTR or any other callable utility.) Don't cripple your system by doing unecessary LIB$SPAWN's just because you are running a program with installed priv's. Something we do here fairly frequently is to disable all privileges when you start running a program and then only turn them on during the operation you need them for. This allows a program to have a /OUT= qualifier and BYPASS but not let the user write over SYSUAF.DAT since we don't turn BYPASS on except for the one time we use it. -- ------------------------------------------------------------------------------ UUCP: {ihpn4!alberta,uw-beaver}!ubc-vision!van-bc!nvanbc!lawrence SNAIL: 733 Sylvan Ave., North Vancouver, B.C., Canada, V7R 2E8 PHONE: 1-604-736-9241 (09:00-17:00 PST) 1-604-420-9518 (after 17:00 PST)