Major secturity problems please help

[danthomas]

HI
I have a dilema.Im wanting to install the gimp throughout our college for the art students to use.
The way the network is set up is that the students only have access to there document folders for security reasons, only administrators like myself can access C: etc.
upon installing the gimp i logged on as a student and found the gimp allows you not only to access ALL drives but DELETE - RENAME-MOVE-any section of any partition of any drive!!!!!.
this ofcourse if a major data protection violation on our belhalf if i was to install the gimp, not to mention the trouble that could be caused my eager students wanting to hack there way into change there exam results and anyother scam.
any ideas? cheers DAN

 

[TonyGroves]

The GIMP can't override the operating system's security settings. Impossible. If it could, then so could any hacker's program. Are you sure you were logged in as a student?

 

[AnimusTek]

It seems to me that your restrictions may not be more than superficial. If you are using registry entries (or group policy) to configure whether a drive can be viewed, that does not actually effect permissions (ACLs). I would recommend auditing the permissions on your systems to make sure that they are being set correctly. You also mentioned the ability to effect partitions and other drives and are worried about hacking into exams etc. That type of data should be in a secured location that students been denied access to. Gimp will in no way change that, but like I said, if your restrictions are via registry or other non-ACL based method, you should reconsider.

I have deployed Gimp in an academic environment, and had no issues with permissions on the local computer, or the network.

Hope this helps your planning.

Daniel