[comp.protocols.appletalk] Access Privs and CAP 5.0

jmvogtle@ICARUS.CNS.SYR.EDU (John M. Vogtle) (09/06/88)

Does anyone KNOW how to set the priveleges in the Unix environment to
make an Mac application execute only?  We're running AppleShare Client
2.0 and CAP 5.0 (with patches 1 - 3 applied).  We have a need to put
software out on a CAP server that people can run but not copy.

I've tried setting the privs to execute only for the diffent forks
without success - when I try to fire up an application on my Mac with
the protections in the .resource directory set to execute only, I
get the following message:

	The file "filename" could not be opened/printed (access
	priveleges error).

where "filename" is the name of the application I was trying to run.

Has anyone succeeded in doing this??? We have some site licences for
software which we'd like to implement without having to buy a Mac to
run AppleShare 2.0.

Any help would be appreciated.  Thanks.
  ___
 (   >      /                   John M. Vogtle
  \_/______/_  ____             Systems Programmer
 / /  (_) / /_/ / <_            Syracuse University
<_/				Internet:   jmvogtle@icarus.cns.syr.EDU
                                AT&T Net:   (315) 443-5772
"One planet is all you get."    Snail Net:  221 Machinery Hall
                                            Syracuse University
                                            Syracuse, New York 13244-1260

magorian@umd5.umd.edu (Dan Magorian) (09/07/88)

Just a tip for people needing to set up software on Appleshare file servers
so that it can't be copied:  instead of messing with permissions or using
the "no-copy" feature in AFS 2.0, you can load up any application with
large dummy resources using Resedit (such as sounds) that never load
until it's too large to fit on an 800k floppy, even if stuffed.  I saw
this somewhere, started to use it, and it works well.  Only problem is
the waste of disk space, usually not a problem.  The only way for someone
to copy one from a write-protected folder is to copy it resource by
resource to a new file, a tedious proposition.

Dan Magorian
Comp Sci Center
Univ of Maryland

aks@hydra.ucsb.edu ( ) (09/13/88)

>Does anyone KNOW how to set the priveleges in the Unix environment to
>make an Mac application execute only?
>[...]
>Has anyone succeeded in doing this??? We have some site licences for
>software which we'd like to implement without having to buy a Mac to
>run AppleShare 2.0.

I talked with some people at UC Santa Cruz recently, and they modified the 
CAP software (aufs) so that if a file's Unix permission is "--x", then the
"bozo" bit is set automatically in its data resource.   I'm not sure how
this provided copy-protection (as I didn't get into the details), but they
seemed pretty sure that it was reliable.

The person to talk to is Evan Schaffer (evan@ssyx.ucsc.edu).

Alan Stebbens (aks@hub.ucsb.edu)

borton@uva.UUCP (Chris Borton) (09/14/88)

In article <833@hub.ucsb.edu> aks@hub.ucsb.edu (Alan Stebbens) writes:
>>Does anyone KNOW how to set the priveleges in the Unix environment to
>>make an Mac application execute only?
>
>I talked with some people at UC Santa Cruz recently, and they modified the 
>CAP software (aufs) so that if a file's Unix permission is "--x", then the
>"bozo" bit is set automatically in its data resource.   I'm not sure how
>this provided copy-protection (as I didn't get into the details), but they
>seemed pretty sure that it was reliable.

Is the bozo bit now in use again under AppleShare?  That was originally set
as copy-protection against "bozos"--the Finder wouldn't copy it if this bit
were set.  However, later versions of the Finder gave up that practice (if
my memory serves me correctly).

-cbb
-- 
Chris Borton	borton%uva@mcvax.{nl,bitnet,uucp} 
Rotary Scholar, University of Amsterdam CS