Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!watmath!clyde!cuae2!gatech!gitpyr!thomps
From: thomps@gitpyr.gatech.EDU (Ken Thompson)
Newsgroups: net.text
Subject: Re: Computer file access policies
Message-ID: <2494@gitpyr.gatech.EDU>
Date: Fri, 24-Oct-86 23:00:31 EST
Article-I.D.: gitpyr.2494
Posted: Fri Oct 24 23:00:31 1986
Date-Received: Sun, 26-Oct-86 01:38:06 EST
References: <1246@kitty.UUCP> <141@rayssd.UUCP> <2433@phri.UUCP> <2046@saber.UUCP> <1616@ncoast.UUCP>
Organization: Georgia Institute of Technology
Lines: 22
Summary: its still irritating



References: <115@tijc02.UUCP> <735@hropus.UUCP> <1040@ho95e.UUCP> <1618@ncoast.UUCP>

> It *might* be possible to run "lp" setgid only -- but that might not help
> you.  (Although it would take strange circumstances to do that.)  But "lp"
> revolves around a few special files in /usr/spool/lp and ordinary users
> shouldn't be allowed to muck with them; even if they know what they're doing,
> mucking with /usr/spool/lp/outputq while lpsched is running is a good way
> to trash the print queue.
> 
	I still find it irritating and so do my user's when I can cat a
file to the screen but can't print it using lp. On our system we have
a shell script which does a cat on a file and pipes it to lp to get 
around the problem. Somehow though it seems like it shouldn't be this
way. Alas, I fear it is a limitation of the rather.

-- 
Ken Thompson  Phone : (404) 894-7089
Georgia Tech Research Institute
Georgia Insitute of Technology, Atlanta Georgia, 30332
...!{akgua,allegra,amd,hplabs,ihnp4,seismo,ut-ngp}!gatech!gitpyr!thomps