Path: utzoo!attcan!uunet!tut.cis.ohio-state.edu!zaphod.mps.ohio-state.edu!rpi!crdgw1!zephyrus!vanpelt
From: vanpelt@crd.ge.com (wayne e vanpelt)
Newsgroups: comp.unix.ultrix
Subject: Security & COPS
Keywords: security
Message-ID: <11883@crdgw1.crd.ge.com>
Date: 14 Sep 90 13:51:23 GMT
Sender: news@crdgw1.crd.ge.com
Reply-To: vanpelt@crd.ge.com (wayne e vanpelt)
Organization: GE CR&D
Lines: 14

Recently one of my coworkers attended a Usenix Conveference on Security.
He brought back with him COPS, a script that will indicate various
weeknesses existing on a particular system. When executed on our vax
3500 running ultrix 3.2 it indicated that /dev/kmem and /dev/mem were
world readable. When this permission was removed, various programs broke
(ps, uptime, and w I know about and adjusted). It appeared to cause some
mail to bounce but I'm not sure if that was a result of the change.

Does anyone have a list of the programs that come with ultrix that need
permission to read /dev/kmem? (Please respond via e-mail to
'vanpelt@crd.ge.com' as I do not regularly read this news group).

Thanks,
 Wayne