Re: [MIB-DOCTORS] Readable and MAXACCESS

Randy Presuhn <randy_presuhn@alumni.stanford.edu> Fri, 14 September 2018 21:19 UTC

To: mib-doctors@ietf.org
References: <f3ab019d-4cfe-91d1-0d58-75c0c641b11f@cysols.com>
From: Randy Presuhn <randy_presuhn@alumni.stanford.edu>
Message-ID: <86660ace-f8ca-86af-7725-55a3382770b1@alumni.stanford.edu>
Date: Fri, 14 Sep 2018 14:19:54 -0700
User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:52.0) Gecko/20100101 Thunderbird/52.9.1
MIME-Version: 1.0
In-Reply-To: <f3ab019d-4cfe-91d1-0d58-75c0c641b11f@cysols.com>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/mib-doctors/FJI0F7E3vDLljekb2VRhIbqfm_w>
Subject: Re: [MIB-DOCTORS] Readable and MAXACCESS
Precedence: list

Hi -

On 9/14/2018 4:10 AM, Glenn Mansfield Keeni wrote:
> Hi,
>    The Security Guidelines for IETF MIB modules says
>     Some of the readable objects in this MIB module (i.e., objects
>     with a MAX-ACCESS other than not-accessible) may be considered
>     sensitive or vulnerable in some network environments.
> 
> This seems to imply that objects that have MAX-ACCESS not-accessible
> are not "readable". But the objects can very well be "read" from the
> index, if the MO is an index object.
> Then "not-accessible" objects too may be sensitive or vulnerable ?

Yes.  The sensitivity of indexes needs to be considered in
the formulation of an access control policy.

Randy

[MIB-DOCTORS] Readable and MAXACCESS Glenn Mansfield Keeni
Re: [MIB-DOCTORS] Readable and MAXACCESS Randy Presuhn
Re: [MIB-DOCTORS] Readable and MAXACCESS Glenn Mansfield Keeni
Re: [MIB-DOCTORS] Readable and MAXACCESS Randy Presuhn
Re: [MIB-DOCTORS] Readable and MAXACCESS Glenn Mansfield Keeni
Re: [MIB-DOCTORS] Readable and MAXACCESS Juergen Schoenwaelder
Re: [MIB-DOCTORS] Readable and MAXACCESS Glenn Mansfield Keeni