> -----Original Message----- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of Roger Lowe > Sent: Wednesday, September 28, 2005 1:53 AM > To: [email protected] > Subject: OSA-ICC and PC's > > > Hi Listers, > For those of you who are using OSA-ICC, how are you > managing 'unwanted software/apps' from being installed onto > the PC's that are being used as MVS Consoles? > > Cheers, > Roger
I find that "knee capping" the violators works well. <grin> What OS are your running on these PCs? If Windows, then exactly what version? I know zippo about Windows. However, I do know that on Windows 2000 Professional, WinXP Professional and above, you can just not give the people "administrator" authority. I am aware of this because I had to have administrator authority on my work PC due to support software installation. The desktop support people weren't going to do it, so I simply listed the 20+ packages that I needed and their approximate required update cycle (as in a Sev 1 to your group if you don't install when I say, no "I'm busy" responses). If you are running Linux, then you can (an should!) make everything in the "root" filesystem read-only. You then mount another filesystem for support files. When you "mount" this filesystem, you use the "noexec" option of the mount command (or in the /etc/fstab). An example /etc/fstab could be: /dev/hda1 / ext3 defaults 1 1 /dev/hda2 /home ext3 defaults,noexec 1 1 Everybody would then have their own subdirectory in /home. But the noexec tells Linux to not allow programs to be run from any subdirectory on that filesystem. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
