Path: utzoo!mnetor!uunet!husc6!hao!ames!ucbcad!ucbvax!LOYVAX.BITNET!JSOTTILE
From: JSOTTILE@LOYVAX.BITNET
Newsgroups: comp.os.vms
Subject: Tightening Security
Message-ID: <8801070636.AA06723@ucbvax.Berkeley.EDU>
Date: 6 Jan 88 22:09:00 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The ARPA Internet
Lines: 20



      I am attempting to tighten security here at our site.  I wish to
remove NETMBX privileges to secure from the hole in DECNET with respect
to MAIL.  We will be upgrading to VMS 4.7 (we are currently running 4.4)
in a few days.

     I have tried removing NETMBX from an account and I find out that it does
everything nice and neat (MAIL was a big issue, but that has NETMBX privs).  One
problem remains.  We have 2 nodes, GREEN and GREY (don't look at me, I didn't
name them) and we would like our users to be able to SET HOST from node to
node.  Both computers share the system disk and UAF files.

     Is there a way to remove NETMBX and continue to allow users to SET HOST
or is it wishful thinking?

- John Sottile
(JSOTTILE@LOYVAX.BITNET)
Student Systems Programmer
Loyola College in Maryland