From: kadie@eff.org (Carl M. Kadie)
Newsgroups: alt.comp.acad-freedom.talk,comp.admin.policy
Subject: Re: Policy Sample: EFF House Rules (version 2.0)
Date: 16 Apr 92 15:32:47 GMT
Organization: The Electronic Frontier Foundation
Originator: kadie@eff.org

Several people have asked me if it would be OK to base their computer
policy on the EFF's in-house policy (enclosed). The authors of the
policy, Helen Trillian Rose (hrose@eff.org) and Chris Davis
(ckd@eff.org) say that it would be fine.

- Carl

kadie@eff.org (Carl M. Kadie) writes:

>[Here are the rules for *.eff.org, the computers of the Electronic
>Frontier Foundation, a private, not-for-profit organization.]

> 1. No unauthorized attempts to gain root access or access to any account
>    not belonging to you on this or any other EFF system.

> 2. No use of this or any other EFF system as a staging ground to crack
>    other systems.

> 3. No use of this or any other EFF system through unauthorized
>    dial-up access.

> 4. No use of this or any other EFF system for illegal or criminal
>    purposes.

> 5. All users are responsible for their own telecom access charges, if any.

> 6. Any user who finds a possible security hole on any EFF system is
>    obliged to report it to the system administrators.  If you're not
>    sure, report it, don't try to use it.

> 7. Users are responsible for all use of their accounts, including
>    choosing safe passwords and ensuring file protections are set
>    correctly.

> 8. Sharing passwords is not permitted.

> 9. Please keep in mind that many people use the EFF systems for day to
>    day work.  Obstructing this work by consuming gratuitiously large
>    amounts of system resources (disk space, CPU time) or by
>    deliberately crashing the machine(s) will not be tolerated.  In
>    general we will ask you to clean up your disk space and/or stop your
>    own processes except in emergencies; please cooperate by running
>    large jobs at night and by using the "nice" command to lower the
>    priority of CPU-intensive processes.

>10. All users should be on notice that the system administrators do
>    periodic security checks of EFF systems, including password checks.
>    Any user with a "bad password" will be notified via email.  If the
>    user does not change passwords within a timely manner, the account
>    will be locked until the person in question contacts, *via
>    telephone*, one of the system administrators to reinstate the
>    account in question.

>11. Electronic mail on this system is as private as we can make it.
>    Attempts to read another person's electronic mail or other protected
>    files will be treated with the utmost seriousness.  The system
>    administrators will not read mail or non-world-readable files unless
>    absolutely necessary in the course of their duties, and will treat
>    the contents of those files as private information at all times.
>    Bounced mail is directed to the system administrators in the form of
>    *headers only* for purposes of assuring reliable e-mail service.



>-- 
>Carl Kadie -- I do not represent EFF; this is just me.
> =kadie@eff.org, kadie@cs.uiuc.edu, or (anonymous) ap.3619@layout.berkeley.edu=
-- 
Carl Kadie -- I do not represent EFF; this is just me.
 =kadie@eff.org, kadie@cs.uiuc.edu, or (anonymous) ap.3619@layout.berkeley.edu=
Newsgroups: alt.comp.acad-freedom.talk