Re: DMPSYSOBJ, SETSPFP, etc.

[John Earl <johnearl@xxxxxxxxxxxxxxx>]

Good question Brad,  these exposures are primarily a concern when someone 
already
has access to your system.  The e-business issue is more of an indirect issue.
E-business means that more and more people that you have never met will be
accessing your system.  If everyone who has access to your system is in the same
office as you, you tend to secure differently

than problem is

"Stone, Brad V (TC)" wrote:

> Does this apply to the ebusiness world in particular, or if someone actually
> gains access to your macine?

This applies to someone who already has access to your machine.  Someone who has
access can easily become more powerful (QSECOFR, or more) if you're at QSECURITY
level 30.   I don't know that Level 30 will allow someone to gain access that
they wouldn't also get from level 40 or 50.

jte


--
John Earl                               johnearl@400security.com
The PowerTech Group                     206-575-0711
PowerLock Network Security              www.400security.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---