From:	CSBVAX::MRGATE!@KL.SRI.Com,@wiscvm.wisc.edu:ASIDONHO@JHUIGF.BITNET@SMTP 12-SEP-1987 18:48
To:	EVERHART
Subj:	This is the third time I've posted this, but never got it or replies!

Received: from wiscvm.wisc.edu by KL.SRI.COM with TCP; Sat 12 Sep 87 14:17:30-PDT
Received: from JHUIGF.BITNET by wiscvm.wisc.edu ; Sat, 12 Sep 87 16:17:52 CDT
Date:     Sat, 12 Sep 87 17:16 EDT
From:     <ASIDONHO%JHUIGF.BITNET@wiscvm.wisc.edu> (And... That's why God made REPUBLICANS! ...)
Subject:  This is the third time I've posted this, but never got it or replies!
To:       info-vax@kl.sri.com
X-Original-To:  info-vax@kl.sri.com

     Well, it's true that explicitly opening sys$output and sys$input
from a privileged program doesn't prevent redirection with ass/user,
because DCL doesn't open a user mode assigned file. So much for that
fix! I have also determined that supervisor names are subject to
redirection by completely bypassing DCL with "$run/det/inp=???/out=!!!
installed_program" or similar.

     I have written a useropen routine to open files only using <=exec mode
log names (by changing the lnm_mode field in the FAB as described in 5-19
of the RMS manual). The program works OK for lnm_mode=psl$c_super, that is,
it will ignore user mode names for the open. It fails for lnm_mode=psl$c_exec
however (just doesn't see that exec mode name), unless the exec name is
in the SYSTEM TABLE! Since sys$output and sys$input are process
specific, it seems I am hosed again. I could be turning on and off the
priv, but that seems more error prone and less elegant for what I am
trying to do, not to mention a hassle to add to each program requiring it.

      Anybody have any idea what is going on here?