[comp.sys.mac] GateKeeper and DAs

folta@tove.umd.edu (Wayne Folta) (02/07/89)

How does GateKeeper grant permissions to DAs?  Evidently you grant permission
for access priviliges on a per-program basis by name.  But what about DAs,
like DeskZap, which might need permissions?  Surely you cannot simply grant
permission to DA Handler without granting privileges to all DAs.


Wayne Folta          (folta@tove.umd.edu  128.8.128.42)

nagel@paris.ics.uci.edu (Mark Nagel) (02/08/89)

In article <15831@mimsy.UUCP>, folta@tove (Wayne Folta) writes:
|
|How does GateKeeper grant permissions to DAs?  Evidently you grant permission
|for access priviliges on a per-program basis by name.  But what about DAs,
|like DeskZap, which might need permissions?  Surely you cannot simply grant
|permission to DA Handler without granting privileges to all DAs.

Unless Chris has changed it in the forthcoming version, I believe this is
correct -- you must give permissions to the DA Handler.  Not much of a
problem under MultiFinder (i.e. a virus *could* install itself as a
DA, but then you'd have to run it, etc.).  But under UniFinder, it
seems that you'd have to give permission to *any program that might
open that DA*.  Be careful...

Mark Nagel @ UC Irvine, Dept of Info and Comp Sci
ARPA: nagel@ics.uci.edu              | Charisma doesn't have jelly in the
UUCP: {sdcsvax,ucbvax}!ucivax!nagel  | middle. -- Jim Ignatowski