Conference csc32::consolemanager

1168.0. "C2 security and non-root access to GUI interface" by 29067::J_WIELAND () Wed Jan 24 1996 09:53

Dear readers, we have a PCM access under C2 security.....

With CONSOLE_DEBUG enabled the following output is generated by a non-root
user.  The user is using the following command -- "console -c3"

Note, non-root users that are registered as priviledged users in PCM are not
getting access to the event daemon and consoles.  A GUI "console -c3" user
cannot connect to a system's console.  However, if the user does an "su" to 
root and issues a "console -c3" command the connection and event monitoring 
work without problems.

A non-root user with a PCM authorized access can access a system console if
they use a "console -c hostname" line command.

This is the reported problem.

C3: set_edit_mode End:
CMCreateEventPort: Opening local transport event port

</var/opt/console/tmp/CONSOLE_EVT_ENS_C3>

CMCreateEventPort: Open failure
CMCloseEventPort: Closing Event Port <ENS_C3>
C3: Mon Jan 22 15:16:04 1996:  Failed to connect to ENS
C3: adding ENS connect timer

C3: Priviledges
    Archive .....: 1
    Exit ........: 1
    NoEdit ......: 0
    Reconfigure .: 1
    Send break ..: 0
    Shutdown ....: 1
    Startup .....: 1
    Unlock ......: 1


---------------------------------------------------------------------

We have also included output from an fverify -- note we have applied an ECO
which causes the checksum mismatch.

prd0ws01# /home/myslinr/bin/do_fverify
subset DCROSFBASE160
./usr/opt/DCR160/include/console.h: checksum 61729 should be 47062
./usr/opt/DCR160/include/console.h: size 10814 should be 9652
./usr/opt/DCR160/lib/OSF/libconsole.a: checksum 11047 should be 40105
./usr/opt/DCR160/lib/OSF/libconsole.a: size 1497048 should be 1488598
        4 verification errors encountered.
        0 corrections performed.


any clues?

john wieland
customer support center
colorado springs, colorado