[comp.sys.mac.misc] copy protecting a server

cohen@tramp.Colorado.EDU (Matthew Cohen) (04/12/91)

    I have just discovered a loophole in the security system 
on our macintosh network.  We have four mac SE's, with an AppleTalk
network to another SE.  I have all of the programs on the server
set for locked and copy protected.  this prevents anyone from 
dragging anything off of the server and onto a disk.  However, anyone
with a copy of mactools, or other like program can still copy any
documents or programs off of the (locked + protected) server disk!?!?!

   Is there something that I'm missing?  They log in as a guest, and 
as a guest they have only see files privleges, no see folder or make
changes priv.  Mactools still can't see the folders that it isn't 
supposed to, but anything else is fair game.  I'm using the latest
appletalk version (don't know the name), and system 6.03

Matt Cohen
University Of Colorado @ Boulder
Residence Hall Computer Lab Assistant



-- 
--------------------------------------------------------------------------------
|****The Deathknight*****| I'm gonna stick around     | REALITY is for people  |
|-----Matthew Cohen------| 'till I can't see straight!| who can't handle       |
|Cohen@Spot.Colorado.edu |--Cohen@tramp.colorado.edu--|    FANTASY!!!!         |

mlanett@yoyodyne.ncsa.uiuc.edu (Dr Thrasher) (04/13/91)

In article <1991Apr11.224723.3069@colorado.edu>, cohen@tramp.Colorado.EDU
(Matthew Cohen) writes:
> dragging anything off of the server and onto a disk.  However, anyone
> with a copy of mactools, or other like program can still copy any
> documents or programs off of the (locked + protected) server disk!?!?!

This has always been the security flaw in the Mac OS -- the file protection
bits mean _nothing_. The Finder pays attention to them, but MacTools certainly
doesn't.

You could always disable guest login.
--