Table of Contents
Advertisement
Managing Users and Security
Remote passwords are independent of local passwords. In the preceding example,
ADMIN.BILL could prevent unauthorized persons from logging on as
ADMIN.BILL by entering this command with password LOCBILL at either system:
10> PASSWORD LOCBILL
Accessing Processes on a Remote System
Security Considerations for Remote Processes
With respect to a specific system, each process in the network is either local or
remote. A process is remote to a system if:
It is running on a remote system.
Its creator is on a remote system.
Its creator is remote.
Therefore, a process that is running on a system can be remote with respect to that
system. These restrictions prevent a remote process from creating another process to
access a file whose security specifies local access only.
A remote process cannot suspend or activate a local process. A remote process
cannot stop a local process, unless the stop mode of the local process is 0 (which
allows anyone to stop it).
A remote process cannot put a local process into a debug state.
Using a Remote TACL Process to Gain Local Access
Openers of a file are either local or remote with respect to the file. A local user is logged
on to the system on which the file resides. A remote user is logged on to a different
system in the same network.
A remote accessor of a system can become a local accessor by running a TACL process
in the remote system and logging on. For example, if remote passwords are established
so that user ADMIN.BILL at \WEST can access system \EAST, ADMIN.BILL can
issue these commands:
10> \EAST.TACL
TACL 1> LOGON ADMIN.BILL
Password:
ADMIN.BILL is now logged on as the local ADMIN.BILL on system \EAST.
Therefore, ADMIN.BILL can access disk files on \EAST owned by ADMIN.BILL even
if they are secured OOOO (local owner only) as well as other files that are only
accessible locally.
This remote session can be terminated with the TACL EXIT or LOGOFF command, or
with CTRL-Y. If ADMIN.BILL terminates the TACL process (identified by process ID
Guardian User's Guide —425266-001
16 -21
Accessing Processes on a Remote System
Advertisement
Table of Contents
