OC.PREMA@CU20B.COLUMBIA.EDU (Prema Nair) (07/28/87)
I have noticed that some users who have been given extra priveleges
like PHY_IO, LOG_IO, and SHARE cannot set their privs in a spawned
process, unless they are DEFAULT PRIVS as well.
<<the bottomline here is that if your SET/PROC/PRIV = in your
main process and then create the subprocess, then both our
main and subprocess will have same privileges without the
assignment of PHY_IO, LOG_IO and SHARE as default privs in UAF.
any other way which bypasses setting privs in main process and
going directly to subprocess and then setting privileges, will
cause errors. Unless of course you assign these privs in the
default privileges section of UAF as you said.>>
However, when I spawn out of GNUmacs, {C-x, C-z} I can set mine if the
top process had SETPRV too. Is there a way that the privs for others
are mapped into their sub-process without changing their privs to
DEFAULT ?
<<When you spawned with SETPRV, you have created a process that
can be set to any one of the DCL privs known.
The way to override the assigning of privileges in the default priv
part of UAF is as said above, to SET/PROC/PRIV=your authorized privs
in your main process and this will be carried over to your subprocess.>>
Or are they doing something wrong when they run a MORE_PRIV.COM
which simply is SET/PROC/PRIV=whatever
<<i don't understand why a command procedure is needed for
executing SET/PROC/PRIV= ?>>
<hope above helps>
<prema nair
<sys mgr. columbia univ.>
<MGRNAIR@CUCCVX -->>: 765ave theP"ZP"