Security on a production image
Sebastian Sastre
ssastre at seaswork.com.ar
Tue Aug 24 13:42:03 UTC 2004
It does,
thank you Torsten
Sebastián Sastre
ssastre at seaswork.com.ar
www.seaswork.com.ar
> -----Mensaje original-----
> De: squeak-dev-bounces at lists.squeakfoundation.org
> [mailto:squeak-dev-bounces at lists.squeakfoundation.org] En
> nombre de Torsten Bergmann
> Enviado el: Lunes, 23 de Agosto de 2004 13:30
> Para: squeak-dev at lists.squeakfoundation.org
> Asunto: Security on a production image
>
>
> Hi Sebastián,
>
> when you run your server app in headless mode (for instance
> running the squeak VM as an NT service) - the administrator
> will not see the squeak window and is not able to manipulate
> it using the standard tools. He is only able to use your web
> based config applicatioon (if you provide one).
>
> But you may want to additionally lock down the image if
> someone starts the image with the VM by hand and the Squeak
> window pops up.
> In this case have a look for the following
> package:
>
http://map1.squeakfoundation.org/sm/package/0c6d3bda-adbb-496a-ae84-8d4c
145d14b5
This is usefull for locking down the image for UI based applications
(disabling morphic halos, ...) - you can take this as a base to build on
own customized locker. Especially the code for disabling the Command-dot
interrupts may be usefull. But dont forget to include a backdoor for
yourself.
You can write a simple login dialog which is either displayed when you
save the image or you use the #addToStartUpList: methods to get informed
about image startup. Have a look at senders of #addToStartUpList: and
#addToShutDownList: in your image.
Typically you will send these messages in the class side #initialize
method which is called when you load a class into the image.
Also have a look at: http://minnow.cc.gatech.edu/squeak/518
Hope this helps
Bye
Torsten
--
NEU: Bis zu 10 GB Speicher für e-mails & Dateien!
1 GB bereits bei GMX FreeMail http://www.gmx.net/de/go/mail
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.742 / Virus Database: 495 - Release Date: 19/08/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.742 / Virus Database: 495 - Release Date: 19/08/2004
More information about the Squeak-dev
mailing list
|