7. The program su enables a UNIX user to access another user's account. Unless the first user is the superuser, su requires that the password of the second user be given. A (possibly apocryphal) version of su would ask for the user's password and, if it could not determine if the password was correct because the password file could not be opened, immediately grant superuser access so that the user could fix the problem. Discuss which of the design principles this approach meets, and which ones it violates.

7. The program su enables a UNIX user to access another user's account. Unless the first user is the superuser, su requires that the password of the second user be given. A (possibly apocryphal) version of su would ask for the user's password and, if it could not determine if the password was correct because the password file could not be opened, immediately grant superuser access so that the user could fix the problem. Discuss which of the design principles this approach meets, and which ones it violates.

Operations Research : Applications and Algorithms

4th Edition

ISBN:9780534380588

Author:Wayne L. Winston

Publisher:Wayne L. Winston

Chapter20: Queuing Theory

Section20.10: Exponential Queues In Series And Open Queuing Networks

Problem 10P

See similar textbooks

Similar questions

Consider the following case: Alice, Bob, and Eve are all users on a system using the Unix File Access Control system. Alice wants to create a file (that she will own) that she and Eve can both read and edit, but Bob can't. Assign user IDs to all users and create any groups that are necessary, then use this information to specify the file's access control settings.
For this assignment, write a pair of programs, in C or as shell scripts, to send and receive a message. Your programs will: Send and receive a message by a covert channel on a MINIX 3 system. Hint: A permission bit can be seen even when a file is otherwise inaccessible, and the sleep command or system call is guaranteed to delay for a fixed time, set by its argument. Measure the data rate on an idle system. Create an artificially heavy load by starting up numerous different background processes and measure the data rate again.
Develop an algorithm in the form of a Raptor to identify and display the names of stocks whose share prices are greater than the mean share price and lower than half the highest share price. The stock names and share prices are stored in the text file stocks.txt, attached, where each stock record is stored on two consecutive lines (stock name in the first, and the share price in the second). The solution must work for any arbitrarily large file containing arbitrary values for stock names and share prices (i.e. the number of stocks must not be hard coded in the algorithm). The algorithm must display the names and share prices of the identified stocks, in the following format: CNE Apex: 50.89BCD Micro: 123.23… etc. Hint: Read and store stock names and prices in two separated arrays. Pls. use Raptor
- Let's assume that a system can handle 2,000 users. a UNIX security system that permits 1,990 users to view a single file called "MPX.pdf" is suggested. Do you have any plans for the other ten people who don't have access to the file?
How come I have two identically named files in my account? Let's suppose your home directory is operational. How can I tell my computer to move florence to the Proposals folder in my home directory?
A Unix process may call another process without fully trusting it. In this situation, the caller may want the called process to have access only to the objects that the caller explicitly passes to it, and not to arbitrary files owned by the caller. One possible solution is to create a restricted user ID, and execute the called process under this restricted UID. In some flavors of UNIX, any process can use setuid() to set its EUID to RUID. Are thereany security implications for the situation described above, where one process calls another under a restricted UID? Assume that either the caller, or the callee may be malicious.
By observing the file permissions on the Accounting.txt file and the two directories. Are Alice and Bob able to view the content of Accounting.txt? Please explain. Be specific.
For the following Computer Science question: Does the following Set-UID program have a race condition vulnerability? if(!access("/etc/passwd", W_OK)) { /* the real user has the write permission*/ f = open("/tmp/X", O_WRITE); write_to_file(f); } else { /* the real user does not have the write permission */ fprintf(stderr, "Permission denied\n"); } Please explain your reasoning!
Suppose a user wishes to edit the file xyzzy in a capability-based system. How can he be sure thatthe editor cannot access any other file? Could this be done in an ACL-based system? If so, how? If not, whynot?
- Assume a system is able to support up to 2,000 users. Suggest a UNIX protection schemewhich allows access to a single file named “MPX.pdf” for 1,990 users. How would you treatthe remaining 10 users who shall not be given access to the file?
Your assignment is to write a program that will: 1. accept the name of a file to encrypt (either via prompt or command line argument) 2. produce an encrypted version of the specified file (saving to a different filename), and 3. decrypt the encrypted file (saving to a third filename). c++
Suggest an efficient scheme for maintaining a per-user protection scheme.That is, the system maintains one directory per user, and that directory lists allthe objects to which the user is allowed access. Your design should address theneeds of a system with 1000 users, of whom no more than 20 are active at anytime. Each user has an average of 200 permitted objects; there are 50,000 totalobjects in the system