SECURITY BUG IN INTERACTIVE UNIX SYSV386

[Bill Heiser]

In article <16434 at chopin.udel.edu> weave at chopin.udel.edu (Ken Weaverling) writes:
>
>That would have the same shock value for sysadmins, then I could do 
>*something* to buy myself *some* time like make user.h 600 or make it

Are you suggesting that making user.h is a "work-around" for the problem?
It would seem that anyone dedicated to using this "door" would just 
use an equivalent file of their own from another system.  Or can this be
done?


-- 
home:	...!{uunet,bloom-beacon,esegue}!world!unixland!bill
	bill at unixland.uucp              The Think_Tank BBS & Public Access Unix
508-655-3848 (2400)   508-651-8723 (9600-HST)   508-651-8733 (9600-PEP-V32)
other:	heiser at world.std.com