[bit.listserv.novell] Netware security problem?

PETEHIC@UOTTAWA.BITNET (Pete Hickey) (02/02/90)

HaJo,

Your backup program is a VAP, or a special process running on the
server.  When you do a backup, you talk to the VAP, not the novell
server.  A cleaver programmer would be able to also write a program that
would talk to the VAP.  The operations that can be done, however, depend
on the VAP.  If you would let anyone install VAPs on your server, sure
a cleaver programmer could write a VAP that would let him access the
files without having logged on.  You don't, however.  A VAP is a *trusted*
process running on the server.

If you're familiar with Unix, try thinking in terms of a VAP as a
running with the SUID bit on.  Is it secure?

=======================================================================
Pete Hickey                     | Convention says that something funny
University of Ottawa            | goes here.  Its blank because I have
Ottawa, Ontario, CANADA         | nothing funny to say.
(613) 564-7646                  |_____________________________________
    petehic@uotacdvm.uottawa.CA      PETEHIC@UOTTAWA.BITNET