next up previous contents index
Next: Network identification numbers Up: Getting the database Previous: Running t2lincks

Security

 

In general, given the environment in which the system was developed, security has not been given priority. By default, the current system is installed with encrypted passwords, which the user can change by using the dbpasswd  program. It is up to you, the administrator, to ensure that the passwd  file is readable only by the owner. Since dbpasswd is installed suid database owner, normal users will be able to update their password themselves.

There is no security in the database at the object level. If the user can access an object through his or her user object, there is no protection to keep him or her from reading it. By using the write group user definitions file, wrgroups,  you can limit certain users' write access to objects created by specific users. Notice the write protection is only in effect if the wrgroups file exists.



Martin Sjolin
Sat May 27 00:36:55 MET DST 1995