The BECOME Command The BECOME command allows a privileged user to assume almost any attributes of any user in the UAF. The program requires CMKRNL privilege, since the information it changes is in protected memory. There is help for BECOME in the file BECOME.HLP. The program is pretty much self-explanatory, I believe. /USERNAME and /UIC are the defaults, which may be changed by editing the BECOME.CLD file. If you plan to put the BECOME executable somewhere other than SYS$SYSTEM, the .CLD file will need to be edited to reflect the new location. BECOME is a command, and the command definition for it is in the aforementioned .CLD file. See the AAAREADME.1ST file for INFORM for information about installing the command. We have found BECOME very useful at ECS, since we have a number of 'development' accounts (privileged) which are very project-specific. BECOME allows us to keep these quotas and privileges separate without having the danger of the account being broken into - since they are set /FLAGS=DISUSER in the UAF! Also, BECOME is very useful for moving files around without having to look up a UIC and then set it. BECOME tries to grab CMKRNL, so if your AUTHPRIV mask specifies either CMKRNL or SETPRV (regardless of the CURPRIV mask), you can use it. When munging privileges, it modifies ONLY the CURPRIV mask. A word of caution, and a note on our implementation: DO NOT INSTALL BECOME! It is a very dangerous program, having essentially the same implicit hazards of SETPRV and DETACH, and should be used ONLY by responsible people. At ECS, we have two sets of commands: those the users can execute, and those available to the staff. The latter are a superset of the former. The users are not even aware of such programs as BECOME, as the help is in a help library pointed to by a GROUP logical name available only to the staff groups. The command set is set up by the system login procedure (SYS$SYLOGIN), and the staff command set is protected from world access. BECOME is usable only on VMS systems running V3.0 or higher.