HDTenEightyP/NetNews huggingface dataset:
From: winalski@adserv.enet.dec.com (Paul S. Winalski)
Newsgroups: comp.os.vms
Subject: Re: CMKRNL as an image priv:  Security problem?
Date: 1 Oct 92 20:43:59 GMT
Reply-To: winalski@adserv.enet.dec.com (Paul S. Winalski)
Organization: Digital Equipment Corporation, Nashua NH


In article <1OCT199214032074@robot.nuceng.ufl.edu>, sysop
                            writes:
|>
|>If a process has an image privilege (as opposed to a process privilege), is
|>it
|>possible for that process to acquire the priv?  How?  What can I do to 
|>prevent
|>a possible security problem like this? 

If the image is written properly, there isn't any problem.  However, the
programmer must be very careful when using the amplified privileges.  My
recommendation is to use $SETPRV to turn off CMKRNL and the other amplified
privileges first thing in the privileged image.  Then briefly turn them on
again only for the duration of the exact system services or other operations
that require the amplified privilege.  That way, the run-of-the-mill things
that the program does are safe.  Even so, you must be very careful when
coding such an application to avoid being spoofed by a hostile user.  For
example, before opening files, make sure that the user would be able to open
the file in the absence of the amplified privs.

As a system manager, make sure that you really, really can trust the
privileged image before you INSTALL it.

--PSW
Xref: sparky comp.os.vms:15931 vmsnet.misc:884
From: munroe@dmc.com (Dick Munroe)
Newsgroups: comp.os.vms,vmsnet.misc
Subject: Re: Delayed lexical evaluation in a DCL symbol?
Date: 2 Oct 92 06:55:18 EDT
Organization: Doyle, Munroe Consultants, Inc., Hudson, MA

In article <1992Oct1.121433.1@slacvx.slac.stanford.edu>, fairfield@slacvx.slac.stanford.edu writes:
>     DCL question: how can you get delayed evaluation of a lexical function
>     ------------  in a symbol?
> 

Ken,

You can't.  DCL doesn't recursively expand foreign symbols, thus the "'" is
illegal in the context of execution of the command.  The reason it's legal with
the leading "'" is that you've forced evaluation of the string (kind of like
EVAL in lisp).  I didn't know that the leading "'" would work either.

Dick Munroe
-- 
Dick Munroe				Internet: munroe@dmc.com
Doyle Munroe Consultants, Inc.		UUCP: ...uunet!thehulk!munroe
267 Cox St.				Office: (508) 568-1618
Hudson, Ma.				FAX: (508) 562-1133

GET CONNECTED!!! Send mail to info@dmc.com to find out about DMConnection.
Newsgroups: comp.os.vms
From: music@erich.triumf.ca (FRED W. BACH)
Subject: Re: Utility to delete 0 block file
News-Software: VAX/VMS VNEWS 1.41    
Organization: TRIUMF: Tri-University Meson Facility
Date: Mon, 28 Sep 1992 20:57:00 GMT

In article <1992Sep28.055212.1411@nuscc.nus.sg>, edbis@solomon.technet.sg (Koh Eng San) writes...
>Koh Eng San (edbis@solomon.technet.sg) wrote:
>: Hi there,
>: 
>: I am looking for a file utility that deletes 0 block file. Is such a utility
>: available?
>: 
>: Cheers.
>: 
> 
>Perhaps I have not myself clear. My apologies. What I am looking for is a
>command or utility that allow s me to delete all 0 block files such as
>"DELETE/SIZ=0 *.*;*". I know there is no such VMS command...
> 
>Cheers

    here is the general idea (probably you could improve on this)


$orig_message = f$environment("message")
$set message/notext/noseverity/nofacility/noident
$set noon
$!
$! We will set up a scratch file for the directory command output
$! First delete all versions of this file, if any exist
$! Error messages are turned off
$!
$set prot=o:rwed zero_list.tmp;*
$delete zero_list.tmp;*
$set on
$! Turn error messages on
$set message/text/sever/facil/ident
$!
$! This directory command might take a while, so....
$write sys$output "Now selecting files with zero size...."
$!
$dir/nohead/notrail/select=size=max=0/exclude=(*.dir,zero_list.tmp.*)-
/output=zero_list.tmp *.*.*
$!
$! If there were any files in the current directory with zero size
$! then their filename(s) will be written in this file
$! We will check the size of this file first to see if it is empty
$!
$zero_list_size = f$file_attributes("zero_list.tmp","eof")
$If zero_list_size .eq. 0
$then
$ write sys$output "There are no files with zero size in this directory."
$ goto exit_2
$endif
$
$type zero_list.tmp
$inquire go_ahead "Proceed to delete these files"?
$
$do_delete:
$if go_ahead
$then
$ open/read/error=exit  temp zero_list.tmp;1
$ read/error=exit/end=exit temp file_to_delete
$ delete ="delete"
$ dir/size/date=mod/prot 'file_to_delete'
$ delete/log/confirm 'file_to_delete'
$endif
$goto do_delete
$exit:
$close temp
$exit_2:
$delete zero_list.tmp.1
$set message'orig_message'
$exit

  This simple code works for some zero-sized files I created.  It
also exited gracefully with the correct message when there were
no files of zero length found.

 Fred W. Bach ,    Operations Group        |  Internet: music@erich.triumf.ca
 TRIUMF (TRI-University Meson Facility)    |  Voice:  604-222-1047 loc 278/419
 4004 WESBROOK MALL, UBC CAMPUS            |  FAX:    604-222-1074
 University of British Columbia, Vancouver, B.C., CANADA   V6T 2A3

 These are my opinions, which should ONLY make you read, think, and question.
 They do NOT necessarily reflect the views of my employer or fellow workers.
From: ACCESS@KRDC.INT.ALCAN.CA (Shawn Allin - Alcan KRDC Computer Services)
Newsgroups: comp.os.vms
Subject: Re: Utility to delete 0 block file
Date: 30 Sep 92 20:51:38 GMT
Distribution: world
Organization: The Internet

Date sent:  30-SEP-1992 16:38:30 
>In a previous article, 
agate!spool.mu.edu!yale.edu!jvnc.net!nuscc!edbis@ucbvax.Berkeley.EDU wrote:

>> 
>>Hi there,
>> 
>>I am looking for a file utility that deletes 0 block file. Is such a utility
>>available?
>> 
>>Cheers.

I don't know if you mean something that scans for and deletes them, but if 
so, I've got one here.  It's not too robust, but will work...:-)

$!-------------------Cut here-------------------------------
$ VERIFY = 'F$VERIFY(0)'
$!
$! DELETE_ZERO.COM
$!
$! Written by S.D. Allin - August 1992
$!
$! Simple com file to get rid of 0 block files in a directory.
$!
$ IF P1 .EQS. ""
$ THEN
$    INQUIRE/NOPUNCT DIR_SPEC "Enter directory that you want to clean ==> "
$    IF DIR_SPEC .EQS. "" THEN EXIT
$ ELSE
$    DIR_SPEC = P1
$ ENDIF
$ FILE_SPEC = DIR_SPEC + "*.*;*"
$ LOOP:
$ CHECK_FILE = F$SEARCH("''FILE_SPEC'",1)
$ IF CHECK_FILE .NES. ""
$ THEN
$    IF F$FILE_ATTRIBUTES("''CHECK_FILE'","EOF") .EQ. 0
$    THEN
$       ON ERROR THEN GOTO ERROR_DELETING_FILE
$       DELETE/LOG 'CHECK_FILE'
$    ENDIF
$    GOTO LOOP
$ ENDIF
$!
$ EXIT:
$ EXIT
$!
$ ERROR_DELETING_FILE:
$ WRITE SYS$OUTPUT "ERROR DELETING ''CHECK_FILE'"
$ GOTO EXIT
$!--------------------Cut here__________________________________

     Cheers,

     Shawn Allin
     Alcan International Ltd.,
     P.O. Box 8400,
     Kingston, Ont.,
     Canada  K7L 5L9
     (613) 541-2178

     ACCESS@KRDC.INT.Alcan.CA
From: viznyuk@ohstpy.mps.ohio-state.edu
Newsgroups: comp.os.vms
Subject: How to attach a DCL to a mailbox ?
Date: 30 Sep 92 21:06:21 GMT
Article-I.D.: ohstpy.14047.2ac9de8d

I have the following problem:

I'm running a subprocess which read data from
terminal and puts data to a mailbox (or a file).
Now I need to re-direct the system input (DCL)
to that mailbox (or file) so that it could
read a data from that mailbox (file) as if from
terminal. I tried the following:

ASSIGN alt_name SYS$INPUT
or
DEFINE SYS$INPUT alt_name

but the DCL continues to read from terminal
and not from alt_name. As I understood
it's because the SYS$INPUT in system table
hasn't been changed. So what could be
done here ?
I would appreciate any suggestions.
S.V.
From: gavron@spades.aces.com (Ehud Gavron 602-570-2000 x. 2546)
Newsgroups: comp.os.vms
Subject: RE: DCL says 1 = 0 (puzzle)
Date: 4 Oct 92 03:00:00 GMT
Reply-To: gavron@ACES.COM
Organization: ACES Consulting Inc.
News-Software: VAX/VMS VNEWS 1.4-b1

In article <9210031002.AA28002@uu3.psi.com>, leichter@lrw.com 
(Jerry Leichter) writes...
# 
#	--- file XX.COM ---
#	$ ???			[mystery line here]
#	$ show symbol 1
#	-------------------
# 
#	$ @XX.COM
#	  1 = 0   Hex = 00000000  Octal = 00000000000
# 
#	:-)
# 
#Well, this one is very close:
# 
#	$ dummy = F$CONTEXT("PROCESS",1,"NODENAME","*","EQL")
#	$ show symbol 1
# 
#	  1 = -1   Hex = FFFFFFFF  Octal = 37777777777
# 
#Perhaps a better choice of context item would produce 0 ...  You can certainly
#get it to change by evaluating F$PID(1) - but I never get to 0 that way.
# 
#							-- Jerry

	Interestingly enough, this 'bug' has been corrected in
	AlphaVMS AXP 1.0-FT4:
$ dummy=f$context("PROCESS",1,"NODENAME","*","EQL")
%DCL-W-FRZNCTX, context is frozen - either cancel this context or use alternate
 \1\
$ 

	Ehud

--
Ehud Gavron        (EG76)     
gavron@vesta.sunquest.com
From: GOLDER_GL@CORNING.COM ("Gregory L. Golder  974-7539", 607)
Newsgroups: comp.os.vms
Subject: Pathworks on a VAXCluster
Date: 5 Oct 92 18:32:00 GMT
Organization: The Internet


    Hello all,

    	 I have a few questions for anyone who may have the following
    configuration.

    We are considering the purchase of two VAX 4000-400's and we would like
    like to be sure that Pathworks will work the way we want it to on a VAX
    cluster.  What I would like to see happen is that you can define the
    cluster alias as the server node on the clinet machines and the VAXen
    will balance the users between them.  I should add that the VAXen will
    be DSSI clustered and using a bunch of RF disks.

    As a bonus, say that one VAX goes away, would the clients switch to
    the other node without the need to reboot them?  This info is critical
    to our purchase descision, so any good info will be greatly appreciated.

    Thanks,

________________________________________________________________________________
  Gregory L. Golder (Greg), Analyst - Applications, I/S, Corning Incorporated
  Internet: GOLDER_GL@CORNING.COM
                                                      /~\    /~\    /~\    /~\
         ____                                         \ /    \ /    \ /    \ /
       /  AMF \                                       |=|    |=|    |=|    |=|
 ---  (   oo   )                                     /   \  /   \  /   \  /   \ 
---   (        )                                     |   |  |   |  |   |  |   |
_______\ _o__ /_______________________________________\_/____\_/____\_/____\_/__
From: CAPTANSKI33@SNYCORVA.BITNET
Newsgroups: comp.os.vms
Subject: Ymodem Transfer
Date: 30 Sep 92 22:54:00 GMT
Distribution: world
Organization: The Internet

I was transferring in ymodem today using sz.exe. I don't use zmodem. After
it had transferred a certain number of blocks it said A BLOCK WAS LOST
ABORTING TRANSFER. Then for about 3 minutes the screen scrolled and along
the right side of the screen were letters. Why did it do this?

Chris

Newsgroups: comp.os.vms
From: marten@ilt.fhg.de (Lutz Marten)
Subject: Re: Please don't post system management questions to vmsnet.admin
Reply-To: marten@ilt.fhg.de
Organization: FhG-ILT
Date: Wed, 30 Sep 92 16:24:54 GMT


I know Terry, but who is Bob ? 
--
# Lutz Marten,  Postmaster and general dogsbody 
# Fraunhofer-Gesellschaft Institut fuer Lasertechnik 
# BITNET: KQ040MA@DACTH11 , InterNet: marten@ilt.fhg.de                        
# HEPNET: 13533::52714::MARTEN, Phone: +49/241/8906-112, -0
From: UCCGAMBLE@MERLIN.NLU.EDU (Stuart Gamble, University Computing Center)
Newsgroups: comp.os.vms
Subject: Forwarding Mail by Distribution Lists
Date: 28 Sep 92 18:47:42 GMT
Article-I.D.: MERLIN.920928134742.5fef
Distribution: world
Organization: The Internet

I am trying to set up an account to forward mail to several users.  I tried 
forwarding the account's mail to a list of users in a distribution file by 
typing:

	MAIL>	SET FORWARD @DISTRIBUTE.DIS

and also

         MAIL>   SET FORWARD "@DISTRIBUTE.DIS"

When mail is sent to the account I get the following message:

	%MAIL-E-USERSPEC, invalid usser specification '@DISTRIBUTE.DIS'

Looks to me that the SET FORWARD command will not forward to distribution 
lists.  Has anyone set anything like this up or have any ideas on how to set 
one up.		Thanks


					Stuart Gamble
					Northeast Louisiana University
					uccgamble@merlin.nlu.edu
From: ROSSJI@JS-JTF.AF.MIL ("Jim Ross")
Newsgroups: comp.os.vms
Subject: Re:DecwMotif v1.1 Session Mgr Dies
Date: 28 Sep 92 03:57:00 GMT
Organization: The Internet

I forgot, I also changed the sylogin.com and login.com to simply $exit on
the first line. I also checked and decw*login.com do nothing.
Jim
Newsgroups: comp.os.vms
From: oci@gpu.utcs.utoronto.ca (Chip Campbell)
Subject: How to avoid mount verification during server reboot?
Summary: I want to reboot VAXcluser boot node with less impact on cluster.
Keywords: mount verify, VAXcluster, LAVc
Organization: News access via UTCS Public Access
Date: Mon, 5 Oct 1992 19:04:15 GMT

We occasionally have to reboot the boot node of our LAVc (NI cluster)
and we'd like to lessen the impact on users on the other nodes, ideally
to the point where they experience a pause but no serious interruption.
Currently, when we do this, the satellite nodes put disks on which
files are open into a mount verify state, that does NOT go away when
the server re-boots.  Other disks (with no open files) seem to dis-mount
and re-mount normally.  The only way to put the mount-verify disks back 
into operation seems to be to terminate the processes with open files, 
whereupon the disks dismount.

I figure the problem is that the boot node is issuing a dismount request
on these disks as it shuts down, but I don't know how to suppress that.
Only the user disks seem to behave this way; I have not seen the problem
on the system disk.

This is VMS 5.4; the cluster is five VAXserver 3100s, one of which is serving
the system disk and two user disks (each a 1-GB SCSI drive).

Any comments will be appreciated.  Please e-mail me, and I will summarize.

Chip Campbell
Sunnybrook Health Science Centre (University of Toronto)
campbell@srcl.sunnybrook.utoronto.ca
Newsgroups: comp.os.vms
From: brent@uwovax.uwo.ca (Brent Sterner)
Subject: VCS - Cannot enable "permanently disabled" node...
Organization: University of Western Ont, London
Date: Thu, 1 Oct 1992 15:08:03 GMT

   The following *may* be a licensing issue with VCS.  We have CSLG.  My
sales guy indicates that is all I need to monitor many systems, but the
SPD indicates that VCS has a "per system" license as well.

   When I try to define a system to monitor, I receive the diagnostic
that the system has been "permanently disabled".  It isn't clear to me
what I'm doing wrong, but the thought has crossed my mind that my salesman
(and his contacts) are wrong, that in fact I do *not* have an unlimited
license for VCS.  (I have managed to successfully run the VCS demo.)

   If you run VCS using CSLG licensing, could you please reply to me?  If
you can diagnose the "permanently disabled" diagnostic, I like to hear from
you as well.  Thanks,  b.

--
Brent Sterner                       Manager, Academic Technical Support
Fast:       <BRENT@uwo.ca>          <129.100.2.13>
Telephone:  (519)661-2151 x 6036    Fax:   (519)661-3486
Slow:  Computing & Communications Services, Natural Sciences Building
       The University of Western Ontario, London, Ontario, Canada  N6A 5B7
Newsgroups: comp.os.vms
From: bear@nuc.anu.edu.au (Bernhard Fabricius)
Subject: VXT2000 parallel port 
Keywords: VXT2000, LAT, Parallel port
Reply-To: BEAR@NUC.ANU.EDU.AU
Organization: Nuclear Physics, ANU
Date: Tue, 29 Sep 92 05:17:20 GMT


Hi there,
	
	just got a VXT2000 up'n'running. Very nice. The thing has a printer
	port on it which, as far as the manual goes, can be used for LOCAL
	printing only, ie screen-dumps and slave-printer configurations.

	The question is: Does anyone know of a way to access this printer
	port over the network from other machines than the VXT2000 itself ?
	Ie, is there a way of configuring this printer port as just another
	LAT service ? The user wants a printer in his office too, and I
	want to avoid having to use a port on a terminal server (not to 
	mention the cable).  Any ideas ?

Cheers

Bernhard
--------------------------------------------------------------------------------
Dr Bernhard Fabricius              |
Academic VAX/VMS Support           |  "I am a Bear of Very Little Brain,
Department of Nuclear Physics      |           and long words Bother me."
Australian National University     |
                                   |                           - A.A. Milne
InterNet: BEAR@NUC.ANU.EDU.AU      |
    POSTMASTER@NUC.ANU.EDU.AU      |
From: DBURKE%VAXA.decnet@NPT.NUSC.NAVY.MIL ("VAXA::DBURKE")
Newsgroups: comp.os.vms
Subject: Zmodem help needed....
Date: 29 Sep 92 12:15:00 GMT
Organization: The Internet

Date sent:  29-SEP-1992 07:15:15 

Hi,
	As long as the subject is being passed around, I have a problem with 
Zmodem (RZ).  When sending a file to a Vax from a PC (via DecServer), I have 
constant retransmissions of packets (ie packet counter goes 1,2,3,4,2,3,4,5,3,
4,5 etc.)  I believe this is a result of network buffering.  Is there a 
workaround to fix this, or am I not even close as to the problem.

The problem exists at speeds over 2400 baud.  Doesn't seem to be there at 2400 
or below.

Thanks,
================================================================================
Dave Burke                                ||               ___________
Aquidneck Data Corporation                ||              //  ||     ||  
170 Enterprise Center                     ||             //   ||      ||  
Middletown, R.I. 02840                    ||            //    ||       ||  
dburke%vaxb.decnet@npt.nusc.navy.mil      ||           //-----||       ||  
(401) 847-7260                            ||          //      ||      ||
(This line left intentionally blank)      ||         //       ||_____||
================================================================================


Newsgroups: comp.os.vms
From: bnebga@ciba-geigy.ch (Gary Nebbett)
Subject: Survival of LAVC across network modifications
Reply-To: bnebga@ciba-geigy.ch (Gary Nebbett)
Organization: Ciba-Geigy AG, Basel, Switzerland
Date: Wed, 30 Sep 1992 10:24:38 GMT

Given that the members of a LAVC are attached to two or more LAN
segments connected by bridges and that it is to be expected that
it will be occasionally necessary to exchange a bridge (due to a faulty
fan, for example), is it possible to avoid the widespread rebooting
of workstations (due to voluntary cluster exit bugchecks)?

The physical recabling can probably be completed inside 30 seconds
and the bridge learning time is of the same order, so a total network
interruption of some 60 seconds will almost certainly occur.

The SYSGEN parameter RECNXINTERVAL is dynamic, so an initial idea
would be to set this to some suitable value on all cluster members
before replacing a bridge. Does anyone know whether this would
work (i.e. would it reliably increase the maximum tolerable network
interruption interval)?

Would anyone be prepared to explain the use of the SYSGEN SCS
parameter TIMVCFAIL? Does this parameter have any relevance
to Voluntary Cluster Exit bugchecks?


On a slightly different topic, are any descriptions (or even vaguer 
hints) of the packet formats used by the Distributed Lock Manager
and the MSCP available from anywhere? I would happily trade
guesses if there is no reliable source of information. (I already
have a rough idea of the LAVC and SCS formats, although more
information on these packets would also be interesting).


Regards,
Gary Nebbett
Newsgroups: comp.os.vms
From: klovatt@klnet.r-node.gts.org (Keith Lovatt)
Subject: Re: Changing Newmail count
Organization: Lugroid Enterprises
Date: Sun, 27 Sep 1992 19:37:57 GMT
X-Newsreader: Tin 1.1 PL4

pdaunno@Ingres.COM (Paul Daunno, Premium Support) writes:
: I am running VMS version 5.4-3.  When I log into my account it says
: I have 9 new mail messages but I am unable to read them.  Is there
: a way to reset the new mail count?  I looked in mail help and there
: is a SHOW NEW_MAIL_COUNT command but not a SET NEW_MAIL_COUNT command.
: 

Paul,

Your other responses give a good solution. I ended up writing a bit of code
which allowed me to modify and of the fields for any user. I have the source
available (VAX BASIC) if anybody cares.

Keith.
-- 
Keith Lovatt                 	|	Scarborough, Ontario, Canada
klovatt@klnet.r-node.gts.org	|	Phone: +1 416 293 0292
doe.utoronto.ca!klovatt@klnet	|    "You can never find a Lugroid
klovatt@terranet.cts.com	|	when you really need one"
From: drumm@cnsvax.uwec.edu (Danny)
Newsgroups: comp.os.vms
Subject: CAI
Date: 30 Sep 92 13:04:16 -0600
Organization: University of Wisconsin Eau Claire


If anyone has any pointers to free CAI packages for VMS, I would
appreciate hearing from you.

I was told there was a CSLG course-ware(?) on the cd distribution, but
I can not find it.

thanks

-- Dan
Newsgroups: comp.os.vms
From: rbn@sunvis.rtpnc.epa.gov (Bob Boyd)
Subject: Re: Physically Moving a Network
Organization: UNISYS/Environmental Protection Agency
Date: Mon, 5 Oct 1992 16:03:54 GMT

There are lots of little steps in the moves that I have participated in.

I have planned over 7 computer room moves and actually supervised/implemented
4 of them.  

The steps that I find important to include are "verify, verify & verify."

This goes for wiring, cooling/heating, power, emergency power controls,
UPS system, fire suppression/control system, telephone equipment, etc.

There are several stages to this.  The 1st stage is design.  Then the
architect(s)/facility planners draw up detailed drawings that are to be used
by the installers.  Then these must be verified by those supplying the design.
I have spent a lot of hours haggling over things that come up in this process.
Often times there are fire code or OSHA, handicap access, electrical or local
building code that limit/control things you can and cannot do.  Then there are
also the people and "political" considerations... and of course $$$$(money).

The very 1st thing that you might consider doing is writing down a set of 
goals for the move.  What are the objectives of the move?  Does it include
minimum possible downtime?  Is it possible to rent/buy redundant hardware to
stage pieces of the move?  Does it have to be done in 1 fell swoop or can it
be broken into stages?  What must work 1st and how soon after it is moved must
it resume "normal" operation?  Can you hire extra help to assist in the move?
How many people will be affected by the necessary downtimes?  How long can the
company afford for them to be "idle" while the move is completed?  What about
things that don't come up cleanly after they are moved?  What if you have to
rebuild 1 or more disk drives?  Will you have backup tapes of every disk drive
that is being moved?  Are spares readily available should repairs have to be
made?

Etc.....
--
----

Bob Boyd
In The Here & Now
Newsgroups: comp.os.vms