Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!mnetor!uunet!seismo!mcvax!botter!star!sater From: sater@cs.vu.nl (Hans van Staveren) Newsgroups: comp.bugs.4bsd Subject: rdump security deficiency, or am I wrong? Message-ID: <498@sater.cs.vu.nl> Date: Fri, 11-Sep-87 04:47:35 EDT Article-I.D.: sater.498 Posted: Fri Sep 11 04:47:35 1987 Date-Received: Sat, 12-Sep-87 15:37:15 EDT Organization: V.U. Informatica, Amsterdam, the Netherlands Lines: 16 When running rdump on my workstation I have to be root (ofcourse). However to write the tape on the remote machine I also have to be in the /.rhosts file on dumphost. Now *I* can be trusted :-), but there are other workstations on this net. It would seem that rdump should not need to be root on dumphost since it only writes a tape. This could be 1) My lack of understanding 2) Something that one can kludge around 3) A bug Which of the three? Eternal gratitude for a day to the solver of this mystery. Hans van Staveren