Re: Fwd: Multiple vendor 'Taylor UUCP' problems.

From: Andrey A. Chernov (ache@nagual.pp.ru)
Date: 09/09/01 

Date: Sun, 9 Sep 2001 06:16:01 +0400
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: Kris Kennaway <kris@obsecurity.org>

On Sat, Sep 08, 2001 at 19:07:00 -0700, Kris Kennaway wrote:
> > I.e. it is not FreeBSD security problem but uucp problem (as designed).
> > All we need is to protect uucp binaries from modifications (via schg).
>
> Hmm. These flaws in the UUCP suite need to be documented, then.

The are documented (read docs :-) not as 'flaws' but as normal
functionality. By specifying the same system as anybody else you can
easily create havoc there, but UUCP assume that it is 'never happens' or
handled by system admin reactions. Users that have uucp access treated as
one team, not enemies.

> I think it's finally time to make UUCP into a port: I'll work on that
> later tonight.

Maybe. It is rarely enough used nowdays to deserve that. 

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message