Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!ucbvax!ucsd!orion.cf.uci.edu!uci-ics!paris.ics.uci.edu
From: nagel@paris.ics.uci.edu (Mark Nagel)
Newsgroups: comp.sys.mac
Subject: Re: GateKeeper and DAs
Message-ID: <6951@paris.ics.uci.edu>
Date: 7 Feb 89 17:10:21 GMT
References: <15831@mimsy.UUCP>
Sender: news@paris.ics.uci.edu
Reply-To: nagel@paris.ics.uci.edu (Mark Nagel)
Distribution: usa
Organization: University of California, Irvine - Dept of ICS
Lines: 17
In-reply-to: folta@tove.umd.edu (Wayne Folta)

In article <15831@mimsy.UUCP>, folta@tove (Wayne Folta) writes:
|
|How does GateKeeper grant permissions to DAs?  Evidently you grant permission
|for access priviliges on a per-program basis by name.  But what about DAs,
|like DeskZap, which might need permissions?  Surely you cannot simply grant
|permission to DA Handler without granting privileges to all DAs.

Unless Chris has changed it in the forthcoming version, I believe this is
correct -- you must give permissions to the DA Handler.  Not much of a
problem under MultiFinder (i.e. a virus *could* install itself as a
DA, but then you'd have to run it, etc.).  But under UniFinder, it
seems that you'd have to give permission to *any program that might
open that DA*.  Be careful...

Mark Nagel @ UC Irvine, Dept of Info and Comp Sci
ARPA: nagel@ics.uci.edu              | Charisma doesn't have jelly in the
UUCP: {sdcsvax,ucbvax}!ucivax!nagel  | middle. -- Jim Ignatowski