HP3000-L Archives

October 2007, Week 2

HP3000-L@RAVEN.UTC.EDU
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: MPE Image security question
From:
"Peter M. Eggers" <[log in to unmask]>
Reply To:
Peter M. Eggers
Date:
Thu, 11 Oct 2007 16:01:20 -0700
Content-Type:
text/plain
Parts/Attachments:
text/plain (62 lines) 
Let's not forget the "PM" user that has access to everything MPE does,
including modification access, and can "own" the system in a minute.
Actually closer to Unix/Linux root user than a "SM" user.

Pete


On 10/11/07, Donna Hofmeister <[log in to unmask]> wrote:
>
> so by now we all know the answer to this question....but allow me to add
> an additional 2 cents...
>
> in my experience with auditors, they seem to have some understanding of
> what a root user is on unix and the implications of being root.  equate root
> to an sm user for them.  i really hope you don't have to go to battle with
> them regarding the capabilities of an sm user (i think we've all heard some
> horror stories).  most auditors recognize that one the benefits of an
> sm/root logon is the overall health of the system.....and that the risk
> associated with allowing a hu-man (:-) to logon that way is
> acceptable.       - d
>
> ----
> Donna Hofmeister, HP-CSA  Sr. System Programmer
> dgarverick -at- longs -dot- com
> 925-210-6631              Longs Drug Stores
> >>>MY opinions, not Longs Drug Stores'<<<
>
> ----- Original Message ----
> From: Raymond Familar <[log in to unmask]>
> To: [log in to unmask]
> Sent: Wednesday, October 10, 2007 9:43:40 AM
> Subject: [HP3000-L] MPE Image security question
>
> Hi all.
> I am going thru an audit.  (Oh yeah!)
> Can an SM user update a DB in another account?  I am thinking maybe they
> could but would require a DB password.
> Thanks.
> Ray
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
>
>
>
>
>
>
>
>
> ____________________________________________________________________________________
> Need a vacation? Get great deals
> to amazing places on Yahoo! Travel.
> http://travel.yahoo.com/
>
> * To join/leave the list, search archives, change list settings, *
> * etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
>

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2