1 INFO-VAX	Sat, 06 May 2006	Volume 2006 : Issue 251       Contents:! Re: Connection slowness to RSTS/E 8 Re: DCL versus Unix CLIs, was: Re: File output like Unix DHCP client - Help configuring. # Re: DHCP client - Help configuring. P Re: H P To Launch Multi Million Dollar Ad Campaign For The PC  [WAS  Re: OT: IntP Re: H P To Launch Multi Million Dollar Ad Campaign For The PC  [WAS Re: OT: InteP Re: H P To Launch Multi Million Dollar Ad Campaign For The PC [WAS Re: OT: Intel+ Re: IMCB$V_PARENT_PROT What is it good for? + Re: IMCB$V_PARENT_PROT What is it good for?  license problems Re: license problems) Re: Mac OS X no longer immune to viruses! ) Re: Mac OS X no longer immune to viruses!  QUANTUM 4 Re: SET ACCOUNTING/DISABLE does not survive a reboot- Re: TAB character in DCL command-line editing - Re: TAB character in DCL command-line editing   F ----------------------------------------------------------------------  # Date: Sat, 06 May 2006 07:12:50 GMT   From: John Santos <john@egh.com>* Subject: Re: Connection slowness to RSTS/E( Message-ID: <S%X6g.810$0d3.166@trnddc08>   Julian Wolfe wrote:  > Hello! > E > I'm a new user of VMS, and I've set up a virtual VAX with SIMH. I'm I > running OpenVMS 7.3, and I use this system to remotely log into my real " > PDP11/23plus at home via DECnet. > 8 > However, I'm having a slowness problem when I do a SET > HOST/APPLICATION=RTERM 1.42  > H > It takes about 1.25 mins to get the "Connected via RTERM" message, andC > then another 4 minutes to get the "RSTS/E 9.6-11"/"User:" prompt.  >   ? Is it reasonably after you log in, or is everything still slow?   B If it is just establishing the initial connection that is slow, I ? suspect it's a DECnet name resolution problem.  Are you running @ DECnet-IV or DECnet-V (aka DECnet-Plus) on the VAX?  If IV, haveC you added the PDP-11 host name to the VAX (with MCR NCP DEFINE HOST A pdpname ADDRESS 1.42, etc. and the same for the VAX's name on the 7 PDP-11), or if V, register it with MCR DECNET_REGISTER.   B Then (if DECnet-Plus), try SET HOST/APPL=RTERM LOCAL:.pdpname (notB sure if SET HOST/APPL=RTERM LOCAL:.1.42 works), to force it to use@ DECnet name resolution instead of TCP/IP.  The long timeouts you@ are seeing maybe due to it trying to make a TCP/IP connection toE 1.42.0.0 (or 0.0.1.42 or some other weird combination), and only when B that fails, it tries to use 1.42 as a DECnet address.  (Note: thisA only applies to DECnet-V on the VAX side; the RSTS/E side doesn't A know anything about OSI transports, etc. and always uses DECnet.)   B I think RSTS/E 9.6 is recent enough to have LAT; if so, it is muchA better for LAN connections.  You need to enable the LAT server on ; it and then you should be able to SET HOST/LAT from the VAX < (and to it if you enable outgoing LAT on the RSTS/E system.)$ LAT is much "crispier" than RTERM...  ? It's been about 7 years since I used RSTS/E DECnet, but I don't + remember any particular problems with it...     E > This also happens in reverse.  If I try to connect to the sim'd VAX H > from the PDP11, it takes one minute or so to get a connection confirm,E > then about 4 minutes later I get a "Welcome to OpenVMS version 7.3" A > login, and then another 2 minutes later I get the login prompt.  >   F This is less likely to be a name resolution problem, because TCP/IP is not in the equation.  I > The wierd part of this whole thing is, if it's not interactive related, F > it's just fine and fast - i.e. broadcast messages from either system > come in immediately.  C Huh?  Do you mean that once connected, REPLY/TERMINAL=RTAx: (from a C login session on another VAX terminal directed to the fake terminal F port created by the RSTS-to-VAX login), or the equivalent in the other@ direction (I can't remember the RSTS/E command to broadcast to aB terminal, used to be UT SEND, but there is a DCL equivalent) comes> out more or less instantly?  Or are you talking about Ethernet broadcasts?     C > This does not seem to happen between the real PDP and a simulated 8 > version of it either, so this has to be a VMS problem. > % > Any help would be most appreciated!  >  > Thanks >  > Julian >      --   John Santos  Evans Griffiths & Hart, Inc. 781-861-0670 ext 539   ------------------------------   Date: 6 May 2006 09:50:14 -0700 $ From: "AEF" <spamsink2001@yahoo.com>A Subject: Re: DCL versus Unix CLIs, was: Re: File output like Unix C Message-ID: <1146934213.961533.202380@i40g2000cwc.googlegroups.com>    davi...@alpha2.mdx.ac.uk wrote: l > In article <1146872269.637151.135640@g10g2000cwb.googlegroups.com>, "AEF" <spamsink2001@yahoo.com> writes: > > " > >david20@alpha2.mdx.ac.uk wrote:o > >> In article <1146616707.415114.288360@v46g2000cwv.googlegroups.com>, "AEF" <spamsink2001@yahoo.com> writes: % > >> >david20@alpha2.mdx.ac.uk wrote:  > >> >> In article <445656D0.A6669895@NeOaSrPtAhMlNiOnWk.net>, "David J. Dachtera" <djesys.nospam@NeOaSrPtAhMlNiOnWk.net> writes: ( > >> >> >david20@alpha2.mdx.ac.uk wrote:
 > >> >> >>b > >> >> >> In article <4452d96f@usenet01.boi.hp.com>, "FredK" <fred.nospam@nospam.dec.com> writes: > >> >> >> >> > >> >> >> >"Rob Brown" <mylastname@gmcl.com> wrote in messageK > >> >> >> >news:Pine.LNX.4.61.0604281211340.19111@localhost.localdomain...  > >> >> >> >   [......] (big snip)    > >What's your point?  > >  > E > The point was in refuting the claim in the top section of this post  >  > " N > >> >> >> >> > Why include Unix?  In Unix, no filename (or extension) has anyQ > >> >> >> >> > implicit meaning.  Applications may impart meaning, but the OS ju  > >> >> >> >> > don't care. 
 > >> >> >> >> : > >> >> >> >> I think that the same is true in VMS or RSX.
 > >> >> >> >>  > >> >> >> > > >> >> >> >    .DIR > >> >> >> > > >  > "  > < > which suggested that .DIR  on VMS has an implicit meaning.    * OK, I think we can agree on the following:  E If a file ends in .DIR;1 then it means (implied or otherwise) that it @ will be looked for by an appropriate directory lookup operation. Example: The file        DISK$DATA1:[AAA]BBB.DIR;1   > will be the target of an operation attempting to inerptret the directory-spec       DISK$DATA1:[AAA.BBB]  E IOW, a file ending in .DIR;1 will be expected (or assumed!) by RMS to C be a directory. If said file is not a bona fide directory, an error  message will be issued:    $ DIR [AAA.BBB] B %DIRECT-E-OPENIN, error opening DISK$DATA1:[AAA.BBB]*.*;* as input/ -RMS-E-FND, ACP file or directory lookup failed 0 -SYSTEM-W-BADIRECTORY, bad directory file format $   E VMS (or RMS) obviously considers BBB.DIR to be a corrupted directory.   G Furthermore, *if* no one has done something silly like COPY NL: BBB.DIR C (or other silly or purposefully destructive operations and that the F file has not been corrupted somwhow), then .DIR;1 implies that BBB.DIR is a bona fide directory file.  E Obviously, the "*if*" part makes all the difference to you. In normal + VMS life, the *if* part is rarely relevant.   A Now, while .DIR;1 may not strictly imply a bona fide, uncorrupted E directory file, it is very useful to know that in most circumstances, ; such a file will be found to be a bona fide directory file.    > David Webb [...]  AEF    ------------------------------   Date: 6 May 2006 01:59:28 -0700  From: shofu_au@yahoo.com.au ( Subject: DHCP client - Help configuring.C Message-ID: <1146905968.871258.117600@i40g2000cwc.googlegroups.com>   	 Hi Group,   E Just upgrade my DS10 hobbyist system to OpenVMS 8.2 and TCPIP Service E 5.5-11 using a clean install on formatted disk and loaded with all my ? hobbyist licences.  With the intention of using my alpha on the 	 Internet.   D I went and ran @sys$sysmanager:tcpip$config.  Selected option 1 CoreE Services.  Selected option 2 Interfaces and set my ethernet interface G EWA0 (WE0) to option 2 - Let DHCP configure interface.  Selected E from B the configuration questions for EWB0 (WE1).    Selected WE0 as the5 Primary DHCP interface.  Exited back to the main menu    Shutdown TCPIP services. Restarted TCPIP services.   E >From TCPIP show interface I am getting an IP address from my router. F My draytek  router also has the ds10 listed in its DHCP IP Assigned IP
 Addresses.  ; I then tried to ping an address on the Internet and I got a D system-f-unreachable error.  I then tried tcpip show route and got a TCPIP-ROUTERROR.  E Yes I have DECnet installed and configured, but no way to test.  Show G net gives the DECnet information correctly.  However the TCPIP setup is : wrong.  TCP/IP host/node not yet available Address 0.0.0.0  4 (Rebooted - with TCPIP$STARTUP in systartup_vms.com)  A To simply use the DHCP client on my alpha - do I need to do more?   @ Now a MAC and a PC connected to the same router can get the DHCPC information correctly.   So I assume I am not configuring something  correctly on OpenVMS / TCPIP.   " Thanks -  going around in circles.   Mark   ------------------------------  % Date: Sat, 06 May 2006 14:09:09 +0200 3 From: Wilm Boerhout <w4OLD.boerhout@PAINTplanet.nl> , Subject: Re: DHCP client - Help configuring.6 Message-ID: <445c91fb$0$21294$ba620dc5@nova.planet.nl>  0 shofu_au@yahoo.com.au wrote on 6-5-2006 10:59... [sni] B > Now a MAC and a PC connected to the same router can get the DHCPE > information correctly.   So I assume I am not configuring something  > correctly on OpenVMS / TCPIP.   F Correctly, but maybe incompletely. You also need to configure routing F (i.e. a default gateway), so that VMS can find its way to the outside 5 world. Your DHCP server is probably also your router?    /Wilm    ------------------------------  % Date: Sat, 06 May 2006 10:02:10 +0200 ( From: Michael Kraemer <M.Kraemer@gsi.de>Y Subject: Re: H P To Launch Multi Million Dollar Ad Campaign For The PC  [WAS  Re: OT: Int / Message-ID: <e3hl5j$9qq$01$1@news.t-online.com>    Bill Todd schrieb:K > to promote their barely break-even PC business (note:  not even their PC  F > server business) that's increasingly threatened by Asian cut-throat H > competition on the one hand while it continues to fight ineffectively  > against Dell on the other. >   , one might be inclined to ask: why complain ?& According to common belief in this NG,F VMS is highly profitable (be it true or not), whereas HP/wintel isn't.D So it is good business logic to advertise the less successful items.   ------------------------------  $ Date: Sat, 6 May 2006 07:09:13 -0400) From: "Neil Rieck" <n.rieck@sympatico.ca> Y Subject: Re: H P To Launch Multi Million Dollar Ad Campaign For The PC  [WAS Re: OT: Inte 9 Message-ID: <bt%6g.2651$VV2.193439@news20.bellglobal.com>   / "Tom Linden" <tom@kednos.com> wrote in message  # news:op.s83r9106zgicya@hyrrokkin... I > On Fri, 05 May 2006 14:42:01 -0700, Bill Todd <billtodd@metrocast.net>   > wrote: >  [...snip...]K > It is lamentable not because of anything to do with VMS, but it is simply J > unsound business judgement.  The margins aren't there.  They should haveI > followed IBM's model and found a Chinese (or orther) business partner.   > Dell'sK > margins are consistently above 8% whereas HP's (in this sector) are less   > than aH > per cent.  I wonder what Lenovo's margins are?  I had hoped that Hurd  > would have > been more astute.  >   L When IBM moved their PC business into Lenovo I wondered if they were making K a mistake. Since then, I can see this is not much different than something  I done by Nike; design the product in the west and build it in the east. I  M also see many companies (like IBM) shifting from a retail product (PCs) to a  2 product with almost no retail footprint (servers).  E So I would have to agree. Spending SEVERAL HUNDREDS MILLIONS DOLLARS  E marketing PCs is almost surely a waste of money. The big problem for  M non-technical managers is realizing the difference between a Wintel PC vs. a   Wintel Server.  
 Neil Rieck Kitchener/Waterloo/Cambridge,  Ontario, Canada.8 http://www3.sympatico.ca/n.rieck/links/cool_openvms.html: http://www3.sympatico.ca/n.rieck/links/openvms_demos.html    ------------------------------   Date: 6 May 2006 09:56:10 -0700 $ From: "AEF" <spamsink2001@yahoo.com>Y Subject: Re: H P To Launch Multi Million Dollar Ad Campaign For The PC [WAS Re: OT: Intel C Message-ID: <1146934569.952423.240830@e56g2000cwe.googlegroups.com>    Michael Kraemer wrote: > Bill Todd schrieb:L > > to promote their barely break-even PC business (note:  not even their PCG > > server business) that's increasingly threatened by Asian cut-throat I > > competition on the one hand while it continues to fight ineffectively  > > against Dell on the other. > >  > . > one might be inclined to ask: why complain ?( > According to common belief in this NG,H > VMS is highly profitable (be it true or not), whereas HP/wintel isn't.F > So it is good business logic to advertise the less successful items.  D If it's less successful due to slow sales, that's one thing. But theD claim is that the margins are razor thin which would suggest bailing@ out of the PC biz altogether (or somehow improving the margins)!   AEF    ------------------------------  $ Date: Sat, 6 May 2006 15:13:09 +08003 From: "Richard Maher" <maher_rj@hotspamnotmail.com> 4 Subject: Re: IMCB$V_PARENT_PROT What is it good for?0 Message-ID: <e3hi86$5d$1@news-02.connect.com.au>   Hi,   
 Hoff wrote: - E >    Against my better judgment, I've provided someone claiming to be I > Richard (or Richard) with an example of how security is broken within a + > UWSS image constructed the way he posits.   K I am more than happy if Steve wishes to reproduce any or all correspondance K I have had with him. Then, maybe, you'll be able to spot the "example" that I he (or someone equally as vague as Steve) refers to and that, so far, has  eluded my detection.  F >    I will not provide that example here, as I have enough work to do8 > without giving the script kiddies more to think about.  G Well, that's a real shame 'cos prevention is most often better than the I cure. If people were simply warned of the dangers then they could prevent K security breeches from occuring. Sorry, I forgot. Your answer to the annual D road toll is to simply to stop people from getting in their cars :-(  L Anyway we're not getting anywhere here, so I call on *everyone* out there toJ attack the following code and if you can prove a security breech due to anI inherent flaw in calling out from an inner-mode UWSS (maher$get_user_dir) G into another UWSS (sys$getuai) then I will give you one* carton of beer J deliverable anywhere within the inner Perth Meteropoliton area :-) I don'tF mean some simple coding bug that can be fixed - (a dodgy pointer or anH invalid probe) I mean whatever hallucinogenic fantasy Hoff is banging on about when he says: -   A "And AFAIK, it is not safe to call sys$getuai, since this call is G implemented as a UWSS and not as part of the kernel -- the LOADSS calls H needed to use outer-mode APIs as part of their operations, so the LOADSS+ APIs are not directly part of the kernel.)"   G I mean something that is inherently flawed in the architecture. Show me L elevated privileges, show me protected/system memory corruption, show me the% money! But, whatever you do, SHOW ME!   K I had a look at the $getuai code the other day and the comments discuss how E the MAIL and JOBCTL utilities are linked directly against the $getuai K "object" code  specifically to avoid this issue of calling out to a another I shareable image.Also, I can't find anywhere in VMS (ok layered products I J can, but not core VMS) where this is done! ($persona_create asks customers< to kill themselves, but it doesn't actually do it for them.)  I But regardless of that mountain of evidence, I submit to you that Steve's G talking absolute shite! I'm right and you're all wrong. (Well not quite G *all* of you. And I'll discuss that later if I don't get a satisfactory L response to this) You're all harking back to the pre-imcb$v_parent_prot daysG during the War, when life was good, the days were longer, the grass was ? greener, and a dodgy prostate was the last thing on your minds.    Regards Richard Maher   K * Offers limited to first "successful" case. Beer must be drunk with me and > brand choice is at my discretion :-) And BTW that's Perth, WA.  K So here's the code. Come and shut me up. Dish out humiliations gallore! Put ) an end to this nonsense once and for all.   D 1) maher$share is the UWSS shareable image that contains the routine maher$get_user_dirA 2) maher$get_user_dir calls out from maher$share to sys$getuai in  secureshrp.exeH 3) maher$user is just a user-mode RTL that calls maher$get_user_dir (and isn't really necessary) J 4) The ef_get_user_dir stuff is useful if you want to call this stuff from Rdb G 5) Replace the &s with spaces and I've done my best to prevent wrapping  6) Go crazy. . .   $&on&warning&then&exitA $&if&.not.&f$privilege("cmkrnl,sysprv,pfnmap")&&then&goto&no_priv 9 $&if&f$getsyi("arch_name")&.nes.&"Alpha"&then&goto&no_vax  $! $&create&maher$share.mar ;+ ;&&&&Author:&Richard&Maher ;-- 9 &&&&.macro&define_service,name,narg=0,mode=exec,?endmacro  & / &&&&'mode'_routine_count='mode'_routine_count+1  & , &&&&.call_entry&&&&&max_args=narg,&&&&&&&&&-, &&&&&&&&&&&&&&&&&&&&home_args=true,&&&&&&&&- &&&&&&&&&&&&&&&&&&&&label=name   &&&&.save_psect&&&&local_block &  &&&&.psect&&'mode'_list  &  &&&&.address&&&&&&&&name &  &&&&.restore_psect &  &&&&.if&not_equal&narg   &&&&&cmpb&&&&(ap),#narg  &&&&&bgeq&&&&endmacro  &&&&&movzwl&&#ss$_insfarg,r0 &&&&&ret & 	 endmacro:   	 &&&&.endc 	 &&&&.endm   9 &&&&&&&&.title&&maher$share&-&Get&users&default&directory  &&&&&&&&.ident&&"V3.0" & & &&&&&&&&.library&"sys$library:lib.mlb"   &&&&&&&&$plvdef  &&&&&&&&$prvdef  &&&&&&&&$psldef  &&&&&&&&$dscdef  &&&&&&&&$ssdef &&&&&&&&$uaidef   
 usrnam_max=12 
 out_len=94 enable=1	 disable=0    kernel_routine_count=0 exec_routine_count=0 & C &&&&&&&&.psect&&exec_list,pic,con,rel,lcl,noshr,noexe,rd,nowrt,long  exec_table:  & E &&&&&&&&.psect&&kernel_list,pic,con,rel,lcl,noshr,noexe,rd,nowrt,long 
 kernel_table:  & 
 &&&&&&&&.page B &&&&&&&&.psect&&maher$data,pic,con,rel,lcl,noshr,noexe,rd,wrt,quad   uai_ctx:.long&&&0    uai_lst:.word&&&32,&uai$_defdev  &&&&&&&&.address&- &&&&&&&&&&&&&&&&def_dev  &&&&&&&&.long&&&0    &&&&&&&&.word&&&64,&uai$_defdir  &&&&&&&&.address&- &&&&&&&&&&&&&&&&def_dir  &&&&&&&&.long&&&0    &&&&&&&&.long&&&0    def_dev:.blkb&&&32 def_dir:.blkb&&&64 fao_ctl:.ascid&&"!AC!AC" out_dsc:.long&&&out_len  out_adr:.blkl&&&1    &&&&&&&&.align&&quad$ sys_prv:.quad&&&<prv$m_sysprv>&&&&&& del_prv:.quad&&&0  old_prv:.blkq&&&1   @ &&&&&&&&.psect&&maher$code,pic,con,rel,lcl,shr,exe,rd,nowrt,quad  " &&&&&&&&.sbttl&&Get&directory&info  + &&&&&&&&define_service&maher$get_user_dir,3   A &&&&&&&&&ifnord&&#dsc$k_s_bln,@4(ap),99$&&&&;&Can&read&descriptor > &&&&&&&&&movzwl&&@4(ap),r8&&&&&&&&&&&&&&&&&&;&Get&username&len? &&&&&&&&&bnequ&&&10$&&&&&&&&&&&&&&&&&&&&&&&&;&Check&len&<>&zero ! &&&&&&&&&movzwl&&#ss$_badparam,r0  &&&&&&&&&ret  @ 10$:&&&&&cmpw&&&&#usrnam_max,r8&&&&&&&&&&&&&;&Check&length&<=&12 &&&&&&&&&bgequ&&&20$! &&&&&&&&&movzwl&&#ss$_badparam,r0  &&&&&&&&&ret  B 20$:&&&&&addl3&&&#dsc$a_pointer,4(ap),r7&&&&;&Get&->&to&username->? &&&&&&&&&ifnord&&r8,(r7),99$&&&&&&&&&&&&&&&&;&R&username&string = &&&&&&&&&ifnowrt&#out_len,@8(ap),99$&&&&&&&&;&W&output&buff&& ; &&&&&&&&&ifnowrt&#2,@12(ap),99$&&&&&&&&&&&&&;&W&output&len&  &&&&&&&&&brb&&&&&100$   > 99$:&&&&&movzwl&&#ss$_accvio,r0&&&&&&&&&&&&&;&Access&violation) &&&&&&&&&ret&&&&&&&&&&&&&&&&&&&&&&&&&&&&&    100$:&&&&$setprv_s&-! &&&&&&&&&&&&&&&&&enbflg=#enable,- ! &&&&&&&&&&&&&&&&&prvadr=sys_prv,-  &&&&&&&&&&&&&&&&&prvprv=old_prv 	 &&&&&&&&&  &&&&&&&&&$getuai_s&-! &&&&&&&&&&&&&&&&&contxt=uai_ctx,-   &&&&&&&&&&&&&&&&&usrnam=@4(ap),- &&&&&&&&&&&&&&&&&itmlst=uai_lst  &&&&&&&&&blbc&&&&r0,&999$    &&&&&&&&&movl&&&&8(ap),out_adr& ! &&&&&&&&&$fao_s&&ctrstr=fao_ctl,- ! &&&&&&&&&&&&&&&&&outlen=@12(ap),- ! &&&&&&&&&&&&&&&&&outbuf=out_dsc,-  &&&&&&&&&&&&&&&&&p1=#def_dev,- &&&&&&&&&&&&&&&&&p2=#def_dir   999$:&&&&movl&&&&r0,r5 &&&&&&&&&evax_bic&- ( &&&&&&&&&&&&&&&&&sys_prv,old_prv,del_prv &&&&&&&&&$setprv_s&-" &&&&&&&&&&&&&&&&&enbflg=#disable,- &&&&&&&&&&&&&&&&&prvadr=del_prv  &&&&&&&&&movl&&&&r5,r0 &&&&&&&&&ret  6 &&&&&&&&.psect&&dickie$services,page,vec,pic,nowrt,exe & " &&&&&&&&.long&&&&plv$c_typ_cmod,&0% &&&&&&&&.long&&&&kernel_routine_count # &&&&&&&&.long&&&&exec_routine_count  &&&&&&&&.address&kernel_table  &&&&&&&&.address&exec_table&& ! &&&&&&&&.long&&&&0,&0,&0,&0,&0&&&  &  &&&&&&&&.end $!$ $&macro/list/enable=quad&maher$share $!&  $&link&&/share=maher$share&- &&&&&&&&/sysexe&-  &&&&&&&&/notrace&- &&&&&&&&/section_binding&- &&&&&&&&maher$share,&- &&&&&&&&sys$input:/options   gsmatch=lequal,3,0  . symbol_vector&=&(maher$get_user_dir=procedure)   protect=yes  collect=safe,maher$data    $!- $copy/log&maher$share.exe&sys$common:[syslib]  $!: $if&f$file_attributes("sys$share:maher$share.exe","KNOWN") $then 2 $&&&&&&&installx&replace&sys$share:maher$share.exe $else 0 $&&&&&&&installx&add&sys$share:maher$share.exe&-2 &&&&&&&&&&&&&&&&/open/header/share=address/protect $endif $!- $!&Need&SYSPRV&to&link&against&these&services  $!5 $set&file/protection=(w:e)&sys$share:maher$share.exe& ! $purge&sys$share:maher$share.exe&  $! $create&maher$user.cob identification&division.1 program-id.&&&&ef_get_user_dir&with&ident&"V3.0".  *  data&division. working-storage&section.= 01&&ss$_normal&&&&&&&pic&9(9)&comp&value&external&ss$_normal. ; 01&&rms$_rnf&&&&&&&&&pic&9(9)&comp&value&external&rms$_rnf. # 01&&sys_status&&&&&&&pic&9(9)&comp.  *  linkage&section. *  01&&username_desc&&&&pic&x(8). *  01&&out_dir.# &&&&03&&out_dir_len&&pic&9(4)&comp.  &&&&03&&out_dir_text&pic&x(94).  *  procedure&division&  &&&&&&&&using&&&out_dir, &&&&&&&&&&&&&&&&username_desc. 00.   &&&&move&spaces&to&out_dir_text. &&&&move&zeroes&to&out_dir_len.    &&&&call&"maher$get_user_dir"& &&&&&&&&using&&&username_desc,&  &&&&&&&&&&&&&&&&out_dir_text,& &&&&&&&&&&&&&&&&out_dir_len& &&&&&&&&giving&&sys_status.  &&&&if&sys_status&=&rms$_rnf" &&&&&&&&move&"NL:"&to&out_dir_text &&&&&&&&move&3&to&out_dir_len  &&&&else' &&&&&&&&if&sys_status&not&=&ss$_normal& 6 &&&&&&&&&&&&call&"lib$stop"&using&by&value&sys_status.   &&&&exit&program.  *  end&program&ef_get_user_dir. $! $cobol/lis&maher$user.cob 7 $link/share=maher$user.exe&maher$user.obj,sys$input/opt    sys$library:maher$share/share   ) symbol_vector=(ef_get_user_dir=procedure)    gsmatch=lequal,3,0 $!3 $define/nolog&maher$user&'f$parse("maher$user.exe")  $sql:==$sql$ $sql attach&'file&mf_personnel';    drop&function&ef_get_user_dir;  < create&&function&ef_get_user_dir&(in&char(32)&by&descriptor)( &&&&&&&&returns&varchar(94)&by&reference &&&&&&&&language&sql ; % &&&&&&&&external&name&ef_get_user_dir ? &&&&&&&&location&'maher$user'&with&all&logical_name&translation  &&&&&&&&language&cobol' &&&&&&&&general&parameter&style&variant ? &&&&&&&&comment&is&'Get&UAF&device&and&directory&info&for&user'  &&&&&&&&BIND&ON&CLIENT&SITE  &&&&&&&&bind&scope&connect ;  commit;  exit;  $exit  $!	 $no_priv:  $&&&&&&&write&sys$output&-A &&&&&&&&"Insufficient&privilege.&You&need&(CMKRNL,SYSPRV,PFNMAP)"  $&&&&&&&exit&44  $no_vax:8 $&&&&&&&write&sys$output&"This&code&only&works&on&alpha" $&&&&&&&exit&44     9 "Hoff Hoffman" <hoff-remove-this@hp.com> wrote in message , news:ngh3g.6783$tG7.5011@news.cpqcorp.net... > E >    Against my better judgment, I've provided someone claiming to be I > Richard (or Richard) with an example of how security is broken within a + > UWSS image constructed the way he posits.  > F >    I will not provide that example here, as I have enough work to do8 > without giving the script kiddies more to think about. > H >    I've also suggested (to Richard or someone claiming to be him) thatH > OpenVMS itself need not follow its own rules for support; that OpenVMSE > itself contains constructs and mechanisms and calls that are not or J > would not be supported for use within application programs.  I certainlyI > make heavy use of a number of APIs that I wrote and that I also hold as G > undocumented, for instance -- BACKUP is also using one of these newer E > APIs, too.  (I've discussed a few of these undocumented APIs at the B > bootcamp, and have several pages in the presentations on these.) > H >    I have occasionally offered what amounts to an application securityH > class at various (restricted) events, though it has tended to cause meJ > various problems because it is basically also a how-to class for hacking > into OpenVMS.  Obviously.    ------------------------------  # Date: Sat, 06 May 2006 16:33:35 GMT , From: Hoff Hoffman <hoff-remove-this@hp.com>4 Subject: Re: IMCB$V_PARENT_PROT What is it good for?. Message-ID: <zd47g.203$W5.18@news.cpqcorp.net>   Richard Maher wrote:  K > But regardless of that mountain of evidence, I submit to you that Steve's I > talking absolute shite! I'm right and you're all wrong. (Well not quite I > *all* of you. And I'll discuss that later if I don't get a satisfactory N > response to this) You're all harking back to the pre-imcb$v_parent_prot daysI > during the War, when life was good, the days were longer, the grass was A > greener, and a dodgy prostate was the last thing on your minds.   G    I am not in a position to (publicly) provide what is effectively an  C introductory class in cracking system security, as applied to this  H situation or otherwise.  Whether you believe I am bluffing here or not, 6 I'm simply not going to (publicly) show my cards here.  I    An image that is installed with privileges, or built and installed as  F a user-written system service, is an obvious potential security risk, @ and a construct that should be carefully considered both by the 9 programmers and designers involved, and by the end-users.   G    For reasons of system security (and for general of ease of creation  E and support), I tend to prefer to use a pseudo device driver -- this  F approach provides access using an established API, and other security B features -- over a UWSS.  It doesn't "unload" like a UWSS, but... G (Device drivers, too, are an obvious security target.)  And yes, I can  @ get into and can call user mode (securely) from within a driver.  B    With an NDA (or on a somewhat more formal basis than here in a H newsgroup), I am certainly willing to discuss defenses against cracking E -- and as mentioned, I have presented several classes on maintaining  G system security.  (Or call up HP and appropriately convince the folks,  D and I'll be shipped back to Australia to present this and another a C session or to of your choice -- haven't made it over to Perth, but  % Sydney and Melbourne are quite nice.)   F    As for your example case, you may want to verify the return status H codes from the various calls.  What you are doing is simple enough that G you might not have an exposure here, but (and assuming I'm inclined to  H spend part of my weekend on it, and I've a network to establish) a more ; detailed look at the exec code involved might be warranted.    ------------------------------  * Date: Sat, 6 May 2006 06:19:37 +0000 (UTC) From: griffin@foni.net Subject: license problems - Message-ID: <e3hf5p$a31$1@news01.versatel.de>    Hi, all!  B Does anyone know how long it takes for the license database to getB updated? The last information I received was that the DECUS updateB had been transferred on August 13th 2004, but my membership number3 still gets rejected as being "not in the database".   
 Any ideas?   Jens --   You can't out-sarcasm reality.   ------------------------------  * Date: Sat, 6 May 2006 08:03:33 +0000 (UTC) From: griffin@foni.net Subject: Re: license problems - Message-ID: <e3hl8l$ctg$1@news01.versatel.de>   Q Quoth Phillip Helbig---remove CLOTHES to reply <helbig@astro.multiclothesvax.de>: I > I had a number with DECUS M?nchen (Germany), then got another one while J > working outside Germany, and a third after I moved back.  I got my firstJ > hobbyist licenses while outside Germany.  I moved back to Germany at theC > end of 2002.  I still have to use the second number (obsolete for I > five-and-one-half years) when getting hobbyist licenses.  Just use the  
 > old number.   C Same DECUS chapter, same problem, but without an old number to use.   ( Guess I'll have to stick to NetBSD then.   Jens --   You can't out-sarcasm reality.   ------------------------------  % Date: Sat, 06 May 2006 02:17:03 -0400 ' From: Dave Froble <davef@tsoft-inc.com> 2 Subject: Re: Mac OS X no longer immune to viruses!/ Message-ID: <6smdnWDG4Y87o8HZ4p2dnA@libcom.com>    GreyCloud wrote:  ; > So, you've never used OE to receive infected emails then? 
 > Amazing.  H Not really.  I've never used OE either.  Plenty of other e-mail clients ( available.  Currently using Thunderbird.   --  4 David Froble                       Tel: 724-529-0450> Dave Froble Enterprises, Inc.      E-Mail: davef@tsoft-inc.com DFE Ultralights, Inc.  170 Grimplin Road  Vanderbilt, PA  15486    ------------------------------  % Date: Sat, 06 May 2006 11:20:39 -0600 " From: GreyCloud <mist@cumulus.com>2 Subject: Re: Mac OS X no longer immune to viruses!: Message-ID: <wZydnTpt7sl3R8HZnZ2dnUVZ_v2dnZ2d@bresnan.com>   Dave Froble wrote: > GreyCloud wrote: > < >> So, you've never used OE to receive infected emails then? >> Amazing.  >  > J > Not really.  I've never used OE either.  Plenty of other e-mail clients * > available.  Currently using Thunderbird. >   D It's the worst email program I've ever seen (OE).  This is the main H portal for viruses.  You don't even have to click on reading your email E once you start OE and still receive some viruses.  I quit using it a  B long time ago and started using Thunderbird as well on the old PC.     --   Where are we going?   And why am I in this handbasket?   ------------------------------  * Date: Sat, 6 May 2006 17:14:12 +0000 (UTC)P From: helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) Subject: QUANTUM$ Message-ID: <e3ilh4$7ad$1@online.de>  2 What, in general, do people recommend for QUANTUM?  D The default, 20, is from early VAX days, and is probably not correctC now.  I still have it at 20 on fast VAXes (VAXstation 4000/90A, VAX G 4000/105A) and, years ago, set it to 2 on ALPHA (then a 255/233, now a  H 3000/600).  Interestingly, though it is apparently an AUTOGEN parameter H on ALPHA, a few dozen AUTOGENs since setting it to 2 have never changed 
 its value.   ------------------------------   Date: 5 May 2006 23:24:20 -0700 / From: "Volker Halle" <volker_halle@hotmail.com> = Subject: Re: SET ACCOUNTING/DISABLE does not survive a reboot B Message-ID: <1146896660.047954.50080@i40g2000cwc.googlegroups.com>   Philip,   D the accounting file is automatically opened during initialization ofA the JOB_CONTROL process, so there is no need for a SET ACC/ENABLE  command during startup.   ? Instead of explicitly disabling accounting, you could also STOP E JOB_CONTROL during shutdown. As JOB_CONTROL is running with UIC group D 1, it will not be stopped during the STOPUSER phase of SHUTDOWN.COM.E JOB_CONTROL may also have QMAN$MASTER.DAT open, another reason for an E unexpected merge, if you put that file onto a shared shadowset (other  than the system disk).   Volker.    ------------------------------  % Date: Sat, 06 May 2006 07:51:51 +0200 3 From: Wilm Boerhout <w4OLD.boerhout@PAINTplanet.nl> 6 Subject: Re: TAB character in DCL command-line editing6 Message-ID: <445c398d$0$18604$ba620dc5@nova.planet.nl>  % Dave Froble wrote on 6-5-2006 3:49...  [snip] > H > I'm thinking that it's the terminal driver, not DCL that might have a @ > problem.  The terminal driver doesn't get much TLC these days.  B Just confirmed it on the OPA0: console of a VAX VMS V5.5-2 system F without any network stack. Seems to be there since a long time indeed.   /Wilm    ------------------------------  % Date: Sat, 06 May 2006 02:49:20 -0400 - From: JF Mezei <jfmezei.spamnot@teksavvy.com> 6 Subject: Re: TAB character in DCL command-line editing, Message-ID: <445C46D5.6770DA28@teksavvy.com>   Wilm Boerhout wrote:C > Just confirmed it on the OPA0: console of a VAX VMS V5.5-2 system H > without any network stack. Seems to be there since a long time indeed.  H I wonder if Dave Cutler fixed that bug when he stole that part of VMS to# port to Windows :-) :-) :-) :-) :-)   E Imagine if windows had the same bug. VMS management would have enough H proof to sue Gates for a few billion bucks and could re-hire some of the( engineers it has lost over the years :-)      G Seriously, I can see why they would have inhibited insertion prior to a A tab. Moving the rest of the line one character would have complex B implications because it wouldn't uniformly shift characters by oneH characters to the right, and on terminals that do not support tabs (theyH are faked with spaces),  which means that the terminal driver would haveH to move over to some "tab spaces" and remove a space from it in order to retain the tab alignment.    ------------------------------   End of INFO-VAX 2006.251 ************************