Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!tut.cis.ohio-state.edu!gem.mps.ohio-state.edu!usc!cs.utexas.edu!rice!sun-spots-request From: jbowe@diamond.bbn.com (John Bowe) Newsgroups: comp.sys.sun Subject: fix to make rexd more secure Keywords: Source Message-ID: <3170@brazos.Rice.edu> Date: 15 Nov 89 15:15:53 GMT Sender: root@rice.edu Organization: Sun-Spots Lines: 18 Approved: Sun-Spots@rice.edu X-Refs: Related: v8n177 v8n200 X-Sun-Spots-Digest: Volume 8, Issue 202, message 13 of 17 Here is a fix to rexd.c to do some security checking. When rexd gets a request, it finds the IP address of the requester. The addition I made is to find its host name and look it up in /etc/hosts.equiv. It essentially makes rexd as secure as rshd. This is for OS3.x sources. Does anyone have a fix for OS4? We don't have OS4 src. Ed's Note: Fixes placed in archives. FTP: Hostname : titan.rice.edu (128.42.30.1) Directory: sun-source Filename : rexd.c.fixes Archive Server Address: archive-server@rice.edu Archive Server Command: send sun-source rexd.c.fixes John Bowe