Xref: utzoo comp.unix.wizards:25426 alt.security:2463
Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!cs.utexas.edu!uwm.edu!ux1.cso.uiuc.edu!uxc.cso.uiuc.edu!paul
From: paul@uxc.cso.uiuc.edu (Paul Pomes - UofIllinois CSO)
Newsgroups: comp.unix.wizards,alt.security
Subject: Re: BSD tty security, part 4: What You Can Look Forward To
Message-ID: <1991May6.154014.855@ux1.cso.uiuc.edu>
Date: 6 May 91 15:40:14 GMT
References: <1991Apr30.164646.11693@pcserver2.naitc.com> <721@seqp4.UUCP> <11974: May214:00:3691@kramden.acf.nyu.edu> <729@seqp4.UUCP>
Sender: usenet@ux1.cso.uiuc.edu (News)
Reply-To: Paul-Pomes@uiuc.edu
Organization: University of Illinois at Urbana
Lines: 24


 From: jdarcy@seqp4.ORG (Jeff d'Arcy)

>That's a very nice piece of name-dropping there, but the fact remains that we
>mere mortals have no evidence of your claims.  I have no reason to think this
>program will work on either of the systems I've worked on and, since I can't
>get a copy of the program without major headaches (despite the fact that I'm a
>professional kernel developer in as good a position as anyone to fix the bugs
>on both platforms), I just won't bother.  Maybe I would if I had time, but I'm
>plenty busy without having to take any Bernstein bullshit.

 From: ian@pharaoh.UUCP (Ian Crocker)

>Further to my previous post I thought of a machine I hadn't tried it on and 
>sure enough it worked.  Complete control of the root terminal from an
>unprivileged userid.  Seems this manufacturer is lagging behind the others -
>no prizes for guessing who it is!

Sequoia Systems?  After all, they're too busy to check.

/pbp
--
Paul Pomes, Computing Services Office
University of Illinois - Urbana