Both Universe and Unidata have "remote voc" options which can enable you to
wrap the tools such that TCL commands cannot be used to bypass them.
To get a complete configuration management solution you may need to wrap
tools and install triggers - since triggers cannot be use on your DIR type
files and TCL commands can be used to move items.

[AD] Naturally I will mention that if you'd like a complete solution, ready
to go, feel free to contact me to talk about PRC - complete software
configuration management / software development life-cycle management for
U2.  http://sjplus.com

Regards,
Susan

------------------------------

Date: Mon, 13 Oct 2008 08:00:54 -0400
From: "Israel, John R." <[EMAIL PROTECTED]>
Subject: RE: [U2] Universe Triggers

There is still a hole to the wrapper approach.

Assuming you are trying to catch folks that use the "ED" (or AE) command, we
have to assume that these folks have access to TCL.  If you can get to TCL,
and you are wanting to hide your tracks, you could still copy your record to
a dir file, then use an OS native editor to make your "sneaky" change (like
vi in Unix or Textpad in Windows), then copy the temp record back
overwriting the original.

You never used the "ED" command, but you were still able to change the data
w/o the wrapper detecting it.

Granted, the offender has to know they are being tracked and care enough to
take an approach like this, but it would not be hard to do.

A trigger would still detect this change, and so, IMHO, would be a more
reliable approach.  If used sparingly and wisely, triggers (and native
indexes) are great!


John Israel
Sr. Programmer/Analyst
Dayton Superior Corporation
721 Richard St.
Dayton, OH  45342
937-866-0711 x44380
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to