Path: utzoo!attcan!uunet!jarthur!usc!zaphod.mps.ohio-state.edu!sunybcs!dsinc!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: fasteddy@amarna.gsfc.nasa.gov (John 'Fast-Eddie' McMahon)
Newsgroups: comp.virus
Subject: Re: Mainframe attacks (MVS)
Message-ID: <0007.9007031335.AA01457@ubu.cert.sei.cmu.edu>
Date: 3 Jul 90 04:27:54 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1.BITNET>
Lines: 25
Approved: krvw@sei.cmu.edu

CAH0@gte.com (Chuck Hoffman) writes...
:   On Digital VAXs, the VMS system technically is C2, but in my opinion
:the architecture is so cumbersome that systems managers have some
:justification when they say that you need system privileges all the time
:just to do a job.  Yes, it's C2, but so many people end up with privileges
:that it hardly matters.

I have gotten conflicting answers on this, so I'll ask again...

My understanding is that VMS 4.3 was the version rated at C2, and that
rating did not automatically carry over to later versions of VMS.
Hence, if you are running 4.3 you have (potentially) a C2 system.  But
if you are running 4.4 through 5.4 you don't.

Can someone explain how these ratings apply when a system is upgraded ?

- ------------------------------------------------------------------------------
John "Fast Eddie" McMahon                        FASTEDDY@DFTNIC.GSFC.NASA.GOV
Code 930.4 - Advanced Data Flow Technology Office      SDCDCL::FASTEDDY (SPAN)
NASA Goddard Space Flight Center in Greenbelt, MD               (301) 286-2045
             (Soon to be at TGV, Incorporated - MCMAHON@TGV.COM)
- ------------------------------------------------------------------------------
Disclaimer:  These are my views.  Although I am a NASA contractor, I do not
             speak for NASA or ST Systems Corporation.  Va guvf tybony ivyyntr
             xabja nf gur argjbex, jr ner nyy cevfbaref... Or frrvat lbh...