[mod.computers.vax] DISKQUOTA protections on VMS 4.n

info-vax@ucbvax.UUCP (02/10/86)

We discovered that VMS V4.n install procedure gives execute permissions
to the world while installing diskquota. If you are an educational site
(i.e. lotsa student hackers) and your diskspace is dissapearing to the
void, this may be the reason. Since diskquota is installed w. SYSPRIV,
anybody can change their own quotas. (Our local VMSnauts conjecture
that this is done by DEC purposefully to sell more disks :-)

In our case, we discovered this with the help of a friendly hacker, and
it really did not occur to us to check. (gulp!)

Perhaps VMS install should be bit more verbose about the protections
and priviledges it sets up, as opposed to just rumbling like a lunatic.

Oz
-------
Usenet: [decvax|allegra|linus|ihnp4]!utzoo!yetti!oz
Bitnet: oz@[yusol|yuyetti]
	FREE SOFTWARE FOUNDATION vs. EMPIRE. Watch for
	things to come..

McGuire_Ed@GRINNELL.MAILNET (02/17/86)

You've got worse problems than you think if DISKQUOTA is installed with
SYSPRV on your system.  It isn't installed on mine, and I certainly didn't
add code to remove it.  Seems to me that your "friendly" student hackers
aren't telling everything they know...