[ale] vmware and W2K v. WXP

[James P. Kinney III]

Jeff, et. al.,

The best example I have is this:

Intuit's Quickbooks pro 2000 was written for W2K. If it is installed
into XP pro workstation, the user at the console must have admin rights
for the application to be able to write to the database. Remote users
don't have to have this elevated privilege level. 

So I go to change the "user" level to "power user". It's not there!
There are only two access levels: administrator and user. So do I give
administrator rights to the part-time bookkeeper or tell the company
they have to fork out _another_ $500 to upgrade to Quickbooks XP.

I showed them sql-ledger instead. :)

On Wed, 2002-05-08 at 22:35, Jeff Hubbs wrote:
> James P. Kinney III wrote:
> 
> > By running the app in a Vmware window, the security hole of granting
> > admin privileges to a mere mortal is no longer an issue. The can have
> > admin rights over the Vmware XP run, but they are still a mere mortal on
> > the Linux box.
> > 
> > True, the app just may refuse to run on XP. But the major cause of
> > broken W2K apps on XP is the massive permissions rewrite.
> 
> How is XP different than Win2K in that sense, though?
> 
> In my mind at least, using VMware is a little like having a chroot 
> "jail,"  but in practice, people are going to tend to have some common 
> filespace between the XP instance and the machines you actually care 
> about.  In other words, the security hole can still be there.  VMware 
> WOULD, however, give you a better way to hem in the hole.
> 
> - Jeff
-- 
James P. Kinney III   \Changing the mobile computing world/
President and CEO      \          one Linux user         /
Local Net Solutions,LLC \           at a time.          /
770-493-8244             \.___________________________./

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7 




---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.