Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!uunet!seismo!rutgers!ames!ucbcad!ucbvax!CUNYVMS1.BITNET!ANK
From: ANK@CUNYVMS1.BITNET
Newsgroups: comp.os.vms
Subject: RE: Re: Spawned privs...
Message-ID: <8708052241.AA28708@ucbvax.Berkeley.EDU>
Date: Wed, 5-Aug-87 02:58:00 EDT
Article-I.D.: ucbvax.8708052241.AA28708
Posted: Wed Aug  5 02:58:00 1987
Date-Received: Sat, 8-Aug-87 05:51:52 EDT
Sender: daemon@ucbvax.BERKELEY.EDU
Distribution: world
Organization: The ARPA Internet
Lines: 42

>> A Walker writes:
>> the privilege passing mechanism as it stands is a good way to reliably deny
>> yourself privs for a process.

>Ed writes:

>    No programmer on our staff has ever asked, `how can I create a subprocess
>    that has no privileges?'  The question I get from every new programmer very
>   early on is, `hey, how come I can't turn on my privileges in the
>    subprocess?  I was able to do it yesterday!' or `hey, how come BYPASS staye
d
>    on when I reset my privileges to normal?  I just blew something away becaus
e
>    I thought I just turned off all privs!'

When I initially posted the query on the spawned process privs, I was pointing
to the LIB$SPAWN option... I tested the problem using GNUEmacs both as a
top-process (meaning that I login and am directly in Emacs..) as well as
keeping it in a fork using Kevin's modified utility. The first option would
have me set the PROC/PRIVS in the LOGIN.COM early on, and in the second case,
if I am in Emacs {M-x spawn-attach} or {C-x C-z} would throw me into a
new-subprocess which cannot map the CUR privs. Certainly many programmers
forget whether they had turned the proc's on OR off. I think Ed is
right topoint off the two situations, and I think future versions should look in
to the option.

                                                Anil Khullar
                                        {Ph.D. Prog in Psychology
                                         C.U.N.Y. Grad. Center.
                                        33 W 42 St. Box 295,
                                         New York NY 10036      }

BITNET:ank@cunyvms1
INTERNET:ank%cunyvms1.BITNET@wiscvm.edu
==========================================================================
ON THE SEVENTH DAY GOD RESTED AND WATCHED CELTICS PLAY AT THE GARDEN
==========================================================================
[DISCLAIMER: They say after Boston there is heaven, I agree; I say after
LispM there is nirvana, they don't. This and other such opinion are
held dearly by me, my employers and the institution I represent do not
necessarily hold that view. I am sole culprit of such fantasies. No living
being is responsible, however unsolicited support is welcome]