Re: VMS Privileges Versus Linux Capabilities

From	Stephen Hoffman <seaohveh@hoffmanlabs.invalid>
Newsgroups	comp.os.vms
Subject	Re: VMS Privileges Versus Linux Capabilities
Date	2016-06-16 20:06 -0400
Organization	HoffmanLabs LLC
Message-ID	<njveuh$avo$1@dont-email.me> (permalink)
References	<njv3js$3n6$1@dont-email.me> <b8400d02-c375-406a-ade0-97ee8d738f79@googlegroups.com>

Show all headers | View raw

On 2016-06-16 23:03:46 +0000, lawrencedo99@gmail.com said:

> On Friday, June 17, 2016 at 8:53:18 AM UTC+12, Simon Clubley wrote:
> 
>> The difference between the models is that in VMS there's no such thing 
>> as a fully privileged image or fully privileged user at least in the 
>> sense that is meant under Unix so you don't have to worry about 
>> emulating a root account or suid binaries under VMS.

Any user or installed image with an all-class privilege or any 
user-written system service or user-written system service, or any 
privileged server application, or any device driver or any execlet, or 
any hunk invoked from that context — which can potentially include a 
group-writable LOGIN.COM procedure of a privileged user, for instance — 
or ... whatever... is still a target, and the associated security needs 
to be reviewed.   UWSS and drivers and execlets and ACPs, and images 
installed with any ALL-class privilege — and other such constructs — 
are already or can become fully privileged, with complete system 
access.  Any code in any inner-mode is fully privileged.   Etc.

> Linux also has security options like SELinux or AppArmor. With one of 
> these enabled, even running as root will not give you unchecked access 
> to the system.

SEVMS was the mandatory access control variant of OpenVMS: 
http://h71000.www7.hp.com/openvms/products/sevms/info.html

OpenVMS lacks sandboxes or jails or a BSD-style pledge() mechanism, 
among other constructs.

What OpenVMS calls a subsystem identifier — an ACL-based entitlement 
for executables — can be quite useful.

-- 
Pure Personal Opinion | HoffmanLabs LLC

Thread

VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-15 00:54 -0700
  Re: VMS Privileges Versus Linux Capabilities Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> - 2016-06-16 20:53 +0000
    Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-16 16:02 -0700
    Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-16 16:03 -0700
      Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-16 20:06 -0400
        Re: VMS Privileges Versus Linux Capabilities "Kerry Main" <kemain.nospam@gmail.com> - 2016-06-16 20:57 -0400
        Re: VMS Privileges Versus Linux Capabilities RobertsonEricW <robertsonericw@netzero.net> - 2016-06-21 05:29 -0700
          SEVMS, was: Re: VMS Privileges Versus Linux Capabilities Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP> - 2016-06-21 13:02 +0000
          Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-21 11:20 -0400
            Re: VMS Privileges Versus Linux Capabilities Jerry Eckert <jerry.eckert@gmail.com> - 2016-06-21 11:41 -0500
              Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-21 22:59 -0700
            Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-21 22:57 -0700
              Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-22 09:38 -0400
        Re: VMS Privileges Versus Linux Capabilities mcleanjoh@gmail.com - 2016-06-22 01:09 -0700
          Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-22 09:47 -0400
          Re: VMS Privileges Versus Linux Capabilities David Froble <davef@tsoft-inc.com> - 2016-06-22 16:39 -0400
            Re: VMS Privileges Versus Linux Capabilities Paul Sture <nospam@sture.ch> - 2016-06-22 23:14 +0200
              Re: VMS Privileges Versus Linux Capabilities abrsvc <dansabrservices@yahoo.com> - 2016-06-22 14:41 -0700
                Re: VMS Privileges Versus Linux Capabilities lawrencedo99@gmail.com - 2016-06-22 19:03 -0700
              Re: VMS Privileges Versus Linux Capabilities Stephen Hoffman <seaohveh@hoffmanlabs.invalid> - 2016-06-22 17:48 -0400
                Re: VMS Privileges Versus Linux Capabilities Chris Scheers <chris@applied-synergy.com> - 2016-06-22 19:57 -0500
              Re: VMS Privileges Versus Linux Capabilities David Froble <davef@tsoft-inc.com> - 2016-06-22 20:11 -0400
                Re: VMS Privileges Versus Linux Capabilities koehler@eisner.nospam.decuserve.org (Bob Koehler) - 2016-06-23 09:19 -0400
                Re: VMS Privileges Versus Linux Capabilities David Froble <davef@tsoft-inc.com> - 2016-06-23 12:57 -0400

csiph-web