Re: Commands for Limited Users

<attempt at humor to make a point>
What tool do you use to fix your car?   If you're using a wrench, stop now!

I think the wrench is outdated and should never be used for anything.
There are even places in the car that don't use nuts & bolts! What good is
the wrench then?   And if you have to deal with the new computer chips,
you're really SOL....I think it's obvious that the wrench is dead.

Nope.  The wrench's time has come and gone.  Don't ever use it again  --
for anything.

<end attempt at humor to make a point>

Patrick Botz
Senior Technical Staff Member
IBM Lab Services, Rochester
Security Architecture & Consulting, i5/OS Security Architect
(507) 253-0917, T/L 553-0917
CTC Fax # 507-253-2070
email: botz@xxxxxxxxxx

For more information on CTC, visit our website at
http://www.ibm.com/eserver/services
http://www.ibm.com/servers/eserver/services


security400-bounces@xxxxxxxxxxxx wrote on 09/07/2006 12:30:11 PM:

Phil,

Adopted authority is nearly as outdated as limited capability. It
doesn't work well with triggers or IFS files and is incompletely
implemented. Adoption is ineffective in exits but based on your message
you may have overcome some of the limitations I have run up against. The
biggest reason to avoid adoption is that it is often implemented
incorrectly and is frequently the source of serious security problems.