Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!wuarchive!decwrl!ucbvax!UMIX.CC.UMICH.EDU!krowitz%richter
From: krowitz%richter@UMIX.CC.UMICH.EDU (David Krowitz)
Newsgroups: comp.sys.apollo
Subject: Re:  troubles with security
Message-ID: <9002151926.AA19550@richter.mit.edu>
Date: 15 Feb 90 19:26:08 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 24

I just recently received a reply to an old APR regarding
safeguarding the "shut" and "ex" commands. According to the
reply, the system now looks for the file

/sys/node_data/dm_display/shut_lock

whenever you issue the DM commands "shut" or "ex". If you
have access rights to the file, then the system proceeds
with the shutdown. If the file does not exist, then the
system goes ahead with the shutdown. If no one is logged
in (ie. the DM command line says "plead login") and the
file exists, then the system refuses to shutdown until
you have logged in and reissued the command.

I have not tried any of this yet, as I just received the
reply this morning.


 -- David Krowitz

krowitz@richter.mit.edu   (18.83.0.109)
krowitz%richter.mit.edu@eddie.mit.edu
krowitz%richter.mit.edu@mitvma.bitnet
(in order of decreasing preference)