Path: utzoo!attcan!uunet!zephyr.ens.tek.com!uw-beaver!mit-eddie!mintaka!olivea!oliveb!amiga!boing!dale From: dale@boing.UUCP (Dale Luck) Newsgroups: comp.sys.amiga.tech Subject: Re: AmigaOS/UNIX - A Suggestion Message-ID: <914@boing.UUCP> Date: 25 Oct 90 14:49:13 GMT References: <606@macuni.mqcc.mq.oz> <15069@cbmvax.commodore.com> <643@macuni.mqcc.mq.oz> Reply-To: dale@boing.UUCP (Dale Luck) Organization: Boing, Milpitas, Ca. Lines: 27 In article <643@macuni.mqcc.mq.oz> ifarqhar@sunc.mqcc.mq.oz.au (Ian Farquhar) writes: > >Secondly, few people have pointed out the basic security flaw in Amiga >UNIX: anybody with a fairly simple program can access *anything* in the >UNIX partition as long as this program can read sectors from the disk >under AmigaOS. The scsi.device (or whatever is being provided) should >be able to do this nicely, so without much work a file transfer program >could be written that would lay the UNIX filing system wide open. >Maybe I've missed something here or made an invalid assumption, but this >seems a worry to me! Don't know why this worries you and security on suns does not worry you? It has the exact same security flaw. Anyone that can write programs to access the /dev/sd?? can do this too so what is the difference? There is no difference between the two machines in this regard. As long as you can prevent the user from rebooting their machine from Amiga-Unix to Amiga-Dos you will not have the security problem. Conversely as long as you can keep a user from hitting L1-A on his sun workstation and rebooting -s you also will not have this security problem. > -- Dale Luck GfxBase/Boing, Inc. {uunet!cbmvax|pyramid}!amiga!boing!dale