topic Re: running with system privileges in Operating System - OpenVMS

running with system privileges

mustafa_12 — Sat, 28 Oct 2006 08:44:38 GMT

Hi,

Is there any way for a non-privileged user to run a DCL script (which she can not edit or write) with system privileges? At the same time, she can not run other scripts, commands and exes with these privileges. I am trying to describe the "sudo" utiliy in *nix systems exactly.

Re: running with system privileges

Karl Rohwedder — Sat, 28 Oct 2006 11:02:59 GMT

DCL Routines cannot be installed with privileges. There are several utilities around to allow a non-priv user to gather privs for a specific task, but it is very difficult to tighten those up, so that no security holes are created (e.g. HGLOGIN, JUMP).
We had the requirement to allow non-priv users to stop/start certain applications (which needed privileges) and ended in an installed image, that does a lot of checking (user o.k., allowed for application xyz...) and then started a batchjob under a prived user with an DCl routine doing the job.

regards Kalle

Re: running with system privileges

Jan van den Ende — Sat, 28 Oct 2006 16:35:36 GMT

Mustafa,

Pretty much the same was asked in
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1065204
where I posted our way to do it.

Proost.

Have one on me

jpe