Path: utzoo!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!spool.mu.edu!snorkelwacker.mit.edu!stanford.edu!eos!aio!poirot
From: poirot@aio.jsc.nasa.gov (Daniel T. Poirot)
Newsgroups: comp.unix.ultrix
Subject: Re: ENHANCED SECURITY ULTRIX 4.1
Message-ID: <1991Mar8.001603.572@aio.jsc.nasa.gov>
Date: 8 Mar 91 00:16:03 GMT
References: <1991Mar6.212110.22576@mlb.semi.harris.com> <1965@riscy.enet.dec.com>
Reply-To: poirot@aio.jsc.nasa.gov.UUCP (Daniel T. Poirot)
Organization: NASA Johnson Space Center
Lines: 23

We enabled Enhanced security under Ultrix 4.0.  Rules here say if you
have it, you have to use it.  I was suprised by the number of things
that broke.

Any programs that try to check a password are going to break.  Calls to
getpwent(), getpwnam() or getpwuid(), for example.  Also, password
entries are encrypted with a different routine, so calls to crypt()
with the password aren't going to match what eventually comes back as
the password.

The affected programs all came out of the shadows within a month or so.


Daniel Poirot           poirot@aio.jsc.nasa.gov
Lockheed C07A           "The mind is a terrable thing."
2400 NASA Rd. 1         tel: (713)483-8793
Houston, TX 77058       fax: (713)483-3204

-- 
Daniel Poirot           poirot@aio.jsc.nasa.gov
Lockheed C07A           "The mind is a terrable thing."
2400 NASA Rd. 1         tel: (713)483-8793
Houston, TX 77058       fax: (713)483-6120