DHASKIN@CLARKU.BITNET.UUCP (01/15/87)
On Thu, 15-JAN-1987 11:17 CST Frank Simmons <QQA6194@UMNACVX.BITNET> asks: > IS THERE A WAY TO FORCE AN INTERACTIVE JOB INTO THE BACKGROUND. I AM > THINKING OF SAS OR SPSS-X USERS WHO DO THEIR THING ON-LINE. I WOULD > RATHER THEY DID IT VIA THE BACKGROUND AND GET THEIR RESULTS PRINTED > AUTOMATICALLY. I REALIZE THE SUBMIT COMMAND WILL WORK, BUT I AM > CONCERNED WITH MAL-CONTENTS AND STUDENTS WHO WANT TO USE UP RESOURCES > WHICH COULD BE PUT TO BETTER USE. Welcome to ACLs and the love/hate relationship many managers have with them. I suggest you read the 'Guide to VAX/VMS System Security', and take note especially of page 4-23 and 5-9. Essentially, take away all access to the file to be restricted, then tag on an ACL such as: (IDENTIFIER=BATCH,ACCESS=EXECUTE) That image may then only be executed from a batch process (you may have to tweak the ACL above depending on your exact needs). Note that this _will_ work with an installed image -- I just tried it. Remember, however, to de-install the image, modify the protection codes and ACLs, then re-install. This can also be used to restrict images by node, as each process is also given an identifier SYS$NODE_<node> on login. We are also contemplating restricting SAS and SPSSx as above. As an aside, SPSSx does actually give you another mechanism for restricting interactive use -- define the logical name SPSSX$DISINTER or something like that. Refer to the SPSSx Coordinator's Notebook. Denis W. Haskin ------------------------------------------------------------------------ DHASKIN@CLARKU.BITNET Office of Information Systems (617)793-7193 Clark University 950 Main Street Worcester MA 01610