Path: utzoo!utgpu!news-server.csri.toronto.edu!bonnie.concordia.ca!thunder.mcrcim.mcgill.edu!snorkelwacker.mit.edu!shelby!agate!ucbvax!hwcae.cfsat.honeywell.com!davidy
From: davidy@hwcae.cfsat.honeywell.com (David Young)
Newsgroups: comp.sys.apollo
Subject: re: Apollo problem list / tirade...
Message-ID: <9102252009.AA09593@hwcae.cfsat.honeywell.com>
Date: 25 Feb 91 20:09:02 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 47

Subject: Re: Apollo problem list / tirade...
Newsgroups: comp.sys.apollo
Summary: There is a template file!
References: <9102222205.AA08742@pan.ssec.honeywell.com>

>> Problem List:
>> 
>> > H52) lack of file system security for Domain/OS files  on  systems  in  a
>> > supposedly "closed" environment.
>> > [Apollo response: use 'inprot'; the problem with this is  that  you  must
>> > supply  a  script of what to change and how - if I knew what needed to be
>> > changed, and to what ACL's, I would have already done it] APR # dc6fa.
>> True.  A boilerplate was promised at 10.2.  It never showed up.  I have a
>> 12 page template that does a pretty good job (though we don't get paranoid).
>> HP/APOLLO : I WANT A TEMPLATE!!!!
>> 
>> > N41) a complete set of file and directory ACL's  is  needed  to  properly
>> > configure the file system, as these are not set correctly or consistently
>> > by the installation procedure.
>> > [Apollo response: will not be done before SR11]  Call  #  254175,  APR  #
>> > dcd46.
>> Agreed, but it's "deja vu" time.  See H52.

But there is a template file!  Read the release notes:
                                            
     2.5.3  New Template File for ACLs

     We have included a "canned" template file that you can use with the
     inprot (install protections) tool to change open Domain/OS ACLs to
     closed. The file is located in:

     <//authorized area>/install/templates/apollo/os.v.10.2/ip.closed_sysv

     The inprot tool is located in:

     <//authorized area>/install/tools/inprot

     For more information about inprot, see Installing Software with
     Apollo's Release and Installation Tools (008860-A02).


The template file *also* comes with the SR10.3 RAI tapes.  At least its a start!

David J. Young                      Honeywell -- Air Transport Systems Division
Phone: 602.436.1311                   P.O. Box 21111 M/S P26D3 Phoenix AZ 85036
FAX:   602.436.1310                          INET: @cim-vax.honeywell.com:
UUCP: uunet!asuvax!apciphx!hwcae!davidy        davidy@hwcae.cfsat.honeywell.com


Brought to you by Super Global Mega Corp .com