home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!spool.mu.edu!sdd.hp.com!crash!cmkrnl!jeh
- From: jeh@cmkrnl.com
- Newsgroups: comp.os.vms
- Subject: Re: LIB$SPAWN and privileges...
- Message-ID: <1993Jan21.061400.1249@cmkrnl.com>
- Date: 21 Jan 93 06:14:00 PST
- References: <1993Jan20.060209.4771@fuug.fi> <1jjaskINNqik@gap.caltech.edu> <1993Jan20.175017@mccall.com>
- Distribution: world
- Organization: Kernel Mode Systems, San Diego, CA
- Lines: 30
-
- In article <1993Jan20.175017@mccall.com>, tp@mccall.com (Terry Poot) writes:
- >
- > In article <1jjaskINNqik@gap.caltech.edu>, carl@SOL1.GPS.CALTECH.EDU (Carl J
- > Lydick) writes:
- >>Note: It's possible to create an image which is both executable and
- >>shareable.
- >>Such an image can, of course, be installed with privs. However, the privs
- >>take
- >>effect *ONLY* when it's used as an executable image.
- >
- > Wouldn't a user-written system service qualify as installed, shareable, and
- > privileged? Of course you have to do extra work to do this (system service
- > dispatcher, etc.) Probably well beyond what he's willing to do, but it can be
- > done.
-
- Different sort of "privilege". These are more correctly referred to as
- "protected shareable images". When you INSTALL one you add the /PROTECT
- qualifier. This in itself requires CMKRNL. When such a shareable image is
- activated (as part of activating an executable image) it is then allowed to,
- in essence, contribute code to the system service dispatch mechanism. This
- in turn allows the execution of the code in the image in kernel (or exec) mode.
-
- INSTALLing such an image with /PRIV=(...) has no effect (unless the image is
- also an executable image, and then only when it's activated as such.)
-
- --- Jamie Hanrahan, Kernel Mode Systems, San Diego CA
- drivers, internals, networks, applications, and training for VMS and Windows NT
- uucp 'g' protocol guru and release coordinator, VMSnet (DECUS uucp) W.G., and
- Chair, Programming and Internals Working Group, U.S. DECUS VMS Systems SIG
- Internet: jeh@cmkrnl.com, or hanrahan@eisner.decus.org Uucp: uunet!cmkrnl!jeh
-