Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!decvax!decwrl!ucbvax!HWALHW5.BITNET!DEGROOT
From: DEGROOT@HWALHW5.BITNET.UUCP
Newsgroups: mod.computers.vax
Subject: Security: VAX/VMS PRODUCER startup-file seems to be WORLD-writable
Message-ID: <8607310739.AA21743@ucbvax.Berkeley.EDU>
Date: Wed, 30-Jul-86 11:55:00 EDT
Article-I.D.: ucbvax.8607310739.AA21743
Posted: Wed Jul 30 11:55:00 1986
Date-Received: Thu, 31-Jul-86 17:52:03 EDT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The ARPA Internet
Lines: 16
Approved: info-vax@sri-kl.arpa

System-managers: please check!

The startup-file for DEC's product PRODUCER was world-writable
in SYS$MANAGER after a 'normal' VMSINSTALL-ation.
I checked this at another VAX/VMS-system and the same showed-up.
We use PRODUCER V1.5 and VAX/VMS V4.3.

Cure: $ SET PROT=W SYS$MANAGER:PRODUCER$STARTUP.COM


Tel. 08370-     .KeesdeGroot    (DEGROOT@HWALHW5.BITNET)  o\/o  THERE AINT NO
    (8)3557     Agricultural University, Computer-centre   []   SUCH THING AS
                Wageningen, the Netherlands               .==.  A FREE LUNCH!

DISCLAIMER: My opinions are my own alone and do not represent
            any official position by my employer.