On Wed, October 7, 2009 4:28 pm, Anthony W. Youngman wrote:
> In message
> <663c35400910071056r188989b1x40a2e0b34083c...@mail.gmail.com>, Kyle
> Moore <kmo...@mooreimages.com> writes

< lots deleted >

> Just copy all the accounts across. Make sure they have entries in the
> UV.ACCOUNT file.

If all the accounts are in the same directory, in the same filesystem,
they don't need to be entered into UV.ACCOUNT. That's an 'undocumented
feature' of UV that has been exploited to allow for privacy between
accounts. If you have

/u1/uvclientaccts1/...
/u1(or 2, etc.)/uvclientaccts2/...

and in each directory, several accounts setup, including source
code/object code, database and application, the users who are in
uvclientaccts1 can't logto the accounts in uvclientaccts2 without an
absolute path and using the CHDIR command to do it. If you disable the
CHDIR command (put a wrapper around it, for example) and DO NOT enter
the accounts into UV.ACCOUNT, you have virtual account/client
separation, thus meeting many security requirements. You have to _wrap_
SH, etc. too, of course.

Just an FYI.

Karl




_______________________________________________
U2-Users mailing list
U2-Users@listserver.u2ug.org
http://listserver.u2ug.org/mailman/listinfo/u2-users

Reply via email to