Just a commentary to address capabilities.

It has long been my habit to add MR,DS,PH to programs, groups, accounts, because so many programs needed the capabilities under the classic systems.

Today, I would hope that DS is unnecessary because mostly the extra data segment has gone the way of the dodo--at least I think so.

Also, multiple rins are not so much used either.

But Process Handling is more in demand than ever, particularly with POSIX.

Or am I off base in this regard?

>>> Lars Appel <[log in to unmask]> 12/04 11:50 PM >>>
>To be consistant with the working user and account
>I used ALTUSER to change the new user's  CAP to
>AM,AL,GL,DI,CV,UV,CS,ND,SF,BA,IA,PM,MR,DS,PH.

Adding PH should have been sufficient (in this case). Most Posix
based programs that live outside an MPE group (i.e. in some HFS
directory) require the user to have PH capability (because there
is no such attribute for an HFS directory).

PM capability, for example, should typically not be needed/granted.

Lars.