SCAN_INTRUSION failing to disable users

[Dennis Handly]

>ACME external authentication

I'm surprised they used that acronym.  Anyone growing up with roadrunner cartoons knows that Acme Co products != acme.  ;-)

http://h71000.www7.hp.com/doc/84final/ba554_90015/ch07s04.html#acmesubsystem

[Richard J Maher]

"Solved" or not, if the following thread (examples) does not help explain what you're doing wrong then the question is no longer about $scan_intrusion or VMS in general.

http://h30499.www3.hp.com/t5/Security/Pseudo-Device-Driver-example-available/m-p/3859774/highlight/true#M438

Worth noting that the code does it's own auditing and tells $scan_intrusion not to perform its own. Also the process is trusted/TCB so that $setuai does not trigger a whole lot of auditing.

Cheers Richard Maher

PS. Still yet to see one of Hoff's PDDs