Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.vms > #58474

Re: VMS Privileges Versus Linux Capabilities

From Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP>
Newsgroups comp.os.vms
Subject Re: VMS Privileges Versus Linux Capabilities
Date 2016-06-16 20:53 +0000
Organization A noiseless patient Spider
Message-ID <njv3js$3n6$1@dont-email.me> (permalink)
References <d8434db3-0eb0-481c-8e1c-a0a40805d0dd@googlegroups.com>

Show all headers | View raw

On 2016-06-15, lawrencedo99@gmail.com <lawrencedo99@gmail.com> wrote:
> Do these <http://man7.org/linux/man-pages/man7/capabilities.7.html> look familiar? Certainly the basic concept is similar, even if the details vary.
>
> Just like VMS privileges, a lot of the divisions seem more designed
> to guard against accidents rather than prevent outright malice.

In VMS land, the privileges are (mostly) designed to prevent abuse of
the system and AFAICS the Linux capabilities could likewise be abused.

The difference between the models is that in VMS there's no such thing
as a fully privileged image or fully privileged user at least in the
sense that is meant under Unix so you don't have to worry about emulating
a root account or suid binaries under VMS.

You can get the same effect by turning on all the privileges but there's
no single bit that turns them on all at once.

BTW, and IMHO, the use of the word capability causes confusion with real
capability-based security which is where I first encountered the term.

Some background reading for those unfamiliar with capability-based
security:

	https://en.wikipedia.org/wiki/Capability-based_security

Simon.

-- 
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Microsoft: Bringing you 1980s technology to a 21st century world

Back to comp.os.vms | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-15 00:54 -0700
  Re: VMS Privileges Versus Linux Capabilities Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> - 2016-06-16 20:53 +0000
    Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-16 16:02 -0700
    Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-16 16:03 -0700
      Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-16 20:06 -0400
        Re: VMS Privileges Versus Linux Capabilities "Kerry Main" <kemain.nospam@gmail.com> - 2016-06-16 20:57 -0400
        Re: VMS Privileges Versus Linux Capabilities RobertsonEricW <robertsonericw@netzero.net> - 2016-06-21 05:29 -0700
          SEVMS, was: Re: VMS Privileges Versus Linux Capabilities Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> - 2016-06-21 13:02 +0000
          Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-21 11:20 -0400
            Re: VMS Privileges Versus Linux Capabilities Jerry Eckert <jerry.eckert@gmail.com> - 2016-06-21 11:41 -0500
              Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-21 22:59 -0700
            Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-21 22:57 -0700
              Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-22 09:38 -0400
        Re: VMS Privileges Versus Linux Capabilities mcleanjoh@gmail.com - 2016-06-22 01:09 -0700
          Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-22 09:47 -0400
          Re: VMS Privileges Versus Linux Capabilities David Froble <davef@tsoft-inc.com> - 2016-06-22 16:39 -0400
            Re: VMS Privileges Versus Linux Capabilities Paul Sture <nospam@sture.ch> - 2016-06-22 23:14 +0200
              Re: VMS Privileges Versus Linux Capabilities abrsvc <dansabrservices@yahoo.com> - 2016-06-22 14:41 -0700
                Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-22 19:03 -0700
              Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-22 17:48 -0400
                Re: VMS Privileges Versus Linux Capabilities Chris Scheers <chris@applied-synergy.com> - 2016-06-22 19:57 -0500
              Re: VMS Privileges Versus Linux Capabilities David Froble <davef@tsoft-inc.com> - 2016-06-22 20:11 -0400
                Re: VMS Privileges Versus Linux Capabilities koehler@eisner.nospam.decuserve.org (Bob Koehler) - 2016-06-23 09:19 -0400
                Re: VMS Privileges Versus Linux Capabilities David Froble <davef@tsoft-inc.com> - 2016-06-23 12:57 -0400

csiph-web