Path: utzoo!mnetor!uunet!vsi!friedl From: friedl@vsi.UUCP (Stephen J. Friedl) Newsgroups: comp.mail.uucp Subject: Re: HDB uucp security hole ? Message-ID: <520@vsi.UUCP> Date: 11 Apr 88 01:45:03 GMT References: <116@iwfap.ATT.COM> <11730@codas.att.com> <3976@umix.cc.umich.edu> Organization: V-Systems, Inc. -- Santa Ana, CA Lines: 17 In article <3976@umix.cc.umich.edu>, honey@umix.cc.umich.edu (Peter Honeyman) writes: > in svr3, the "sendthem" strings are opaque unless the invoker has read > access to the Systems file. ^_________ ucase from peter? is this a first :-) ? > peter It appears that uucico uses the read availability of whichever Systems file is used by the transfer: Systems or Systems.cico (pointed to by Sysfiles). On our machine, one file is readable and the other is not, which drove me crazy with the seemingly random visibility of the sendthem strings. Peter has undoubtedly caused a great many "Aha, so *that's* what is going on." out there. Thanks, Peter. -- Steve Friedl V-Systems, Inc. "Yes, I'm jeff@unh's brother" friedl@vsi.com {backbones}!vsi.com!friedl attmail!vsi!friedl