home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!stanford.edu!rutgers!cmcl2!rlgsc.com!gezelter
- From: gezelter@rlgsc.com
- Newsgroups: comp.os.vms
- Subject: Re: BACKUP Question
- Message-ID: <1992Nov7.083207.245@rlgsc.com>
- Date: 7 Nov 92 13:32:07 GMT
- References: <9211062238.AA11641@hermann.barra.COM>
- Organization: Robert Gezelter Software Consultant, Flushing, NY
- Lines: 51
-
- In article <9211062238.AA11641@hermann.barra.COM>, louis@BARRA.COM (Louis Dunne) writes:
- >>Um taking the tape from the drive and putting it somewhere secure
- >>always seems to work for me 8^]
- >>
- >
- > ....
- >
- > There are many steps you can do to prevent everyday users from using
- > your tape drive(s) and/or tapes. My suggestion would be a device
- > level ACL on the tape device(s), and change the device protection to
- > prevent world (and maybe group) access. Then grant that identifier
- > to the "authorized" users of the device. If there are a small number
- > of users who you want to restrict, then do the resverse. Put an ACL
- > on the device which prevents access by a set of users; then grant
- > that identifier to those users. I think this is the reasonably
- > easy "painfree" solulion.
- >
- > Remember, it's important to do something about this if it affects
- > your site. If you don't you'll get hit eventually. Esp if your
- > an educational institution with students who have a spare time
- > playing with this kind of thing!
- >
- > Louis
- > -------------------------------------------------------------------------
- > / Louis Dunne / /
- > / VMS/UNIX Systems / Internet: louis@barra.com /
- > / / Phone: +1 510 649-4229 /
- > / BARRA, Inc. / Fax: +1 510 548-4374 /
- > / 1995 University Ave., Suite 400 / /
- > / Berkeley, CA 94704 / /
- > -------------------------------------------------------------------------
- >
- >
- --
- Louis,
-
- While an ACL will do the job, it also makes the drive unavailable
- to everybody else until you come back in the morning. A less
- nasty form of protection would be to have a batch job which
- requested the tape, at which point the tape drive has already
- been allocated. The batch job can then do a WAIT until an
- appropriate time to actually run the backups.
-
- - Bob
- +--------------------------------------------------------------------------+
- | Robert "Bob" Gezelter E-Mail: gezelter@rlgsc.com |
- | Robert Gezelter Software Consultant Voice: +1 718 463 1079 |
- | 35-20 167th Street, Suite 215 Fax: (on Request) |
- | Flushing, New York 11358-1731 |
- | United States of America |
- +--------------------------------------------------------------------------+
-