Path: utzoo!attcan!uunet!microsoft!alistair
From: alistair@microsoft.UUCP (Alistair BANKS)
Newsgroups: comp.os.os2
Subject: Re: OS/2 Security
Message-ID: <55814@microsoft.UUCP>
Date: 13 Jul 90 18:07:42 GMT
References: <6701@vax1.acs.udel.EDU>
Reply-To: alistair@microsoft.UUCP (Alistair BANKS)
Organization: Microsoft Corp., Redmond WA
Lines: 34

In article <6701@vax1.acs.udel.EDU> lance@vax1.udel.edu (Daniel A Lentz) writes:
>Is there any program (shareware pref.) which would divy the machine into
>protected segments like UNIX?  (Where each user has his own directory such
>as c:\root\lance and c:\root\JohnDoe, etc.)  I'd like to set it up much like
>UNIX, but fancy things like making files world-readable aren't important.
>I'd also like to keep any directory level BELOW the user's home directory
>inaccessable to read, but executable--so that users wouldn't have access
>to the operating system or device drivers.

Microsoft Lan Manager 2.0 provides such a secure file system. The 
access control lists for a file or directory are stored as part of 
the file system itself and unless the local or remote user has 
logged on with a valid name, password pair he will not be able to 
access parts of the disk restricted from him.

The access permissions can be any combination of Read, Write, Create,
Execute, Delete, Change Attributes, & Change Permissions and can
be applied to users or groups of users with a granularity down
to the single file level. New directories and files aquire the default 
permissions for that drive, the per-drive defaults being settable by the 
administrator.

There are four classes of user:- Admin, User, Local & Guest. These 
are treated as special user groups and you can assign permissions 
to a person according to the groups he belongs to.

Local security is a new feature of Lan Manager 2.0. This local security
is a feature of the workstation software as well as the server software. 
Workstation software can be installed freely on your os/2 network,
provided you have bought at least one copy of the server software.

Alistair Banks
OS/2 Group
Microsoft