Sev 1 can also cover security/integrity issues. Long ago I reported that
under Profs (or maybe OfficeVision) a user could send a document (script
file) to another user with embedded codes (.sy I think) which executed
CMS or CP commands when the document was formatted, because the system's
DCF (document formatter) default was to honor .sy codes. So I could send
a document to erase another user's files, send them to me, or do other
bad things.
I think it was IBM's (good) idea to make it Sev 1 and don't think I was
asked to be available 24/7. Of course, the fix was obvious -- patch DCF
to make default behavior to NOT honor .sy commands, require specific
permission for each document, each time. Also of course, a user (or
site) could wrap an exec around DCF to enable .sy, but that's "your gun,
your bullet, your foot", not IBM's problem.
"McKown, John"<john.mck...@healthmarkets.com> said:
To me, and to every shop I've ever worked at, SEV 1 means "we're dead and we are all
staying here until we are working again." One time, this meant a 36 hour shift for
all 3 sysprogs. I was much younger then.
--
Gabriel Goldberg, Computers and Publishing, Inc. g...@gabegold.com
3401 Silver Maple Place, Falls Church, VA 22042 (703) 204-0433
LinkedIn: http://www.linkedin.com/in/gabegold Twitter: GabeG0
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
