Path: utzoo!utgpu!watserv1!watmath!att!linac!uwm.edu!cs.utexas.edu!yale!ox.com!b-tech!zeeff
From: zeeff@b-tech.ann-arbor.mi.us (Jon Zeeff)
Newsgroups: news.software.b
Subject: Re: (C News) limit filesize and inews
Message-ID: <-*N+02_@b-tech.uucp>
Date: 10 Jan 91 15:03:50 GMT
References: <3480@gazette.bcm.tmc.edu> <663302894.24807@mindcraft.com> <3522@gazette.bcm.tmc.edu>
Organization: Branch Technology
Lines: 12

>What do you do though if the news administrator does not have system
>administration authority? [Yes, I know... I am really stretching the

Ah, but effectively he does.  On most systems, "news" owns certain 
files that if replaced with trojan horses would generally lead to news 
having access to every account on the system.  

Uucp has the same problem.  

The suid root firewall approach is the correct one.
-- 
Jon Zeeff (NIC handle JZ)	 zeeff@b-tech.ann-arbor.mi.us