[Info-vax] Why is INSTALL.EXE privileged?

Bart.Zorn@gmail.com bart.zorn at gmail.com
Sun Feb 13 02:48:22 EST 2011


On Feb 12, 10:41 pm, pe... at langstoeger.at (Peter 'EPLAN' LANGSTOEGER)
wrote:
> In article <howard-37FCA5.12571412022... at atoulouse-552-1-42-74.w92-136.abo.wanadoo.fr>, Howard S Shubs <how... at shubs.net> writes:
>
> >In article <4d56c01... at news.langstoeger.at>,
> > pe... at langstoeger.at (Peter 'EPLAN' LANGSTOeGER) wrote:
>
> >> The nice (youtube) video on openvmshobbyist.org reminded me of a question I
> >> had (in the 80ies and) long forgotten:
>
> >> Why is INSTALL.EXE installed with privileges?
>
> >INSTALL changes system structures.  It makes images "known".  It can
> >give those images privileges.
>
> In case you haven't noted the rest of my posting:
>
> Why does the image (INSTALL.EXE) need the privileges?
> This is system managers duty, and system managers have privs already.
> So, no need for the image to have the privileges as well (or at all)...
>
> Nice try, but think again
>
> --
> Peter "EPLAN" LANGSTÖGER
> Network and OpenVMS system specialist
> E-mail  Pe... at LANGSTOeGER.at
> A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist

I did the test and removed the INSTALL entry from SYS
$MANAGER:VMSIMAGES.DAT. The system rebooted without problems. Next
step is to hack AUTOGEN to prevent it from putting INSTALL back in.

Interesting to see that there are more images installed with more
privileges than I can imagine they would need. SETAUDIT even has
BYPASS, which IMHO should not normally be used at all.

Regards,

Bart



More information about the Info-vax mailing list