SUPER.ZIP

Title : SUPER.EXE: switch SUPERVISOR equivalence on/off
Keywords: SUPERVISOR EQUIVALENCE RIGHTS SECURITY UTILITY

SUPER.EXE allows to switch SV equivalence on/off when needed. Do your daily
work as normal user, and be SV only when needed. "SUPER +" switches on,
"SUPER -" switches off, "SUPER cmd" starts with SV rights, then
returns to normal rights, "SUPER ?" gives help. No security gap, since you
have to be SV equivalence to initialize SUPER for you.
(Author: Wolfgang Schreiber)
New features: New options '#' and '*'



SUPER.EXE switch supervisor equivalence on/off on request.
Affects only the file server the current drive is mapped to.
Only a supervisor equivalence can initiate SUPER by calling
"SUPER -". Then he/she can switch equivalence as needed.

Syntax: SUPER - Revoke supervisor equivalence temporarily
SUPER + Make user equivalent to supervisor
SUPER Display current security status
SUPER ? Display this help screen
SUPER # Remove supervisor equivalence and disable SUPER
SUPER * Grant supervisor equivalence and disable SUPER
SUPER Execute any command as supervisor (NW 386 only)
Examples: "SUPER SYSCON" Execute SYSCON as supervisor.



Background:
"SUPER -" will modify the security byte of your bindery property
SECURITY_EQUALS to 0x22 (read/write object). This allows the
user to change his/her own security equivalences.
Then the Supervisor equivalence is removed.

Since the user may change the equivalences now, he/she can later add
Supervisor equivalence with "SUPER +" when needed.
"SUPER " will first add Supervisor equivalence, then
execute the command, and finally remove Supervisor equivalence.

SUPER allows a user who in Supervisor equivalent to do the daily work
as normal user, while Supervisor equivalence is available when needed.
This reduces the risk of accidental damage to files caused by
carelessness, unattended workstations, or viruses.


This program was written by Wolfgang Schreiber in Borland's Turbo Pascal.