Opened 5 years ago
Closed 5 years ago
#227 closed defect (fixed)
GHM Gate ACLs grant access to non-existent or GHM-specific users/projects
| Reported by: | Gary Dixon | Owned by: | Eric Swenson |
|---|---|---|---|
| Priority: | major | Milestone: | MR12.8 |
| Component: | Standard Library | Version: | MR12.7 |
| Keywords: | Cc: |
Description
In checking ACLs on gates (suggested in STEP 6 of SIB Section 4), I found several gates with very un-Multics-like users and projects. I doubt these should be on GHM, and certainly shouldn’t be promulgated to customer sites/systems.
>t>pnt_network_gate_ has a Swenson.SysAdmin.* entry. Why? Perhaps it should be for *.SysAdmin.*?
has an ACTC_SYSM.Daemon.* entry. That certainly shouldn’t be there any more.
Eric Swenson says: "I suspect I added the Swenson.SysAdmin.* when trying to run some of the old network software (as myself). It, of course, got dumped to the 12.7EXEC tape. The other, clearly, came from Honeywell’s tapes."
>sss>metering_gate_ has Grady.Multics.* & various XXX.DPS-E.* entries,
has project-wide for non-existent or non-Multics projects:
*.MOTech *.MPO *.TR
Eric says: "These were as we got these on the 12.3/12.5 tapes. I haven’t 'patched' anything here. I’ve only made changes as per tickets and agreed-upon changes."
Change History (3)
comment:1 by , 5 years ago
| Milestone: | → MR12.8 |
|---|---|
| Version: | → MR12.7 |
comment:2 by , 5 years ago
| Status: | new → accepted |
|---|
comment:3 by , 5 years ago
| Resolution: | → fixed |
|---|---|
| Status: | accepted → closed |

I removed the bad ACLs on >t>pnt_network_gate_ and >sss>metering_gate_ on GHM. The MR12.8 system tapes will have to adjusted ACL.
New ACL on metering_gate_:
New ACL on pnt_network_gate_: