Opened 5 years ago

Closed 5 years ago

#227 closed defect (fixed)

GHM Gate ACLs grant access to non-existent or GHM-specific users/projects

Reported by: Gary Dixon Owned by: Eric Swenson
Priority: major Milestone: MR12.8
Component: Standard Library Version: MR12.7
Keywords: Cc:

Description

In checking ACLs on gates (suggested in STEP 6 of SIB Section 4), I found several gates with very un-Multics-like users and projects. I doubt these should be on GHM, and certainly shouldn’t be promulgated to customer sites/systems.

>t>pnt_network_gate_  has a Swenson.SysAdmin.* entry.    Why?  Perhaps it should be for *.SysAdmin.*?
                      has an ACTC_SYSM.Daemon.* entry.  That certainly shouldn’t be there any more.


Eric Swenson says: "I suspect I added the Swenson.SysAdmin.* when trying to run some of the old network software (as myself). It, of course, got dumped to the 12.7EXEC tape. The other, clearly, came from Honeywell’s tapes."

>sss>metering_gate_   has Grady.Multics.*  & various XXX.DPS-E.* entries, 
                      has project-wide for non-existent or non-Multics projects:
                                      *.MOTech *.MPO  *.TR


Eric says: "These were as we got these on the 12.3/12.5 tapes. I haven’t 'patched' anything here. I’ve only made changes as per tickets and agreed-upon changes."

Change History (3)

comment:1 by Eric Swenson, 5 years ago

Milestone: MR12.8
Version: MR12.7

I removed the bad ACLs on >t>pnt_network_gate_ and >sss>metering_gate_ on GHM. The MR12.8 system tapes will have to adjusted ACL.

New ACL on metering_gate_:

re    *.SysDaemon.*
re    *.HFED.*
re    *.Multics.*
re    *.Operator.*
re    *.SysAdmin.*

New ACL on pnt_network_gate_:

re    IMFT.Daemon.*
re    Card_Input.Daemon.*
re    *.SysAdmin.*
re    *.SysDaemon.*

comment:2 by Eric Swenson, 5 years ago

Status: newaccepted

comment:3 by Eric Swenson, 5 years ago

Resolution: fixed
Status: acceptedclosed
Note: See TracTickets for help on using tickets.