Xref: utzoo comp.sys.pyramid:230 comp.dcom.modems:2411
Path: utzoo!attcan!uunet!lll-winken!lll-tis!helios.ee.lbl.gov!nosc!ucsd!rutgers!apple!voder!pyramid!ctnews!starfish!cdold
From: cdold@starfish.Convergent.COM (Clarence Dold)
Newsgroups: comp.sys.pyramid,comp.dcom.modems
Subject: Re: Solution to Problems with UUCP/modems.
Message-ID: <699@starfish.Convergent.COM>
Date: 8 Sep 88 18:42:15 GMT
References: <520@comdesign.CDI.COM>
Organization: Convergent Technologies, San Jose, CA
Lines: 22

From article <520@comdesign.CDI.COM>, by pst@comdesign.CDI.COM (Paul Traina):
> From article <692@starfish.Convergent.COM>, by cdold@starfish.Convergent.COM (Clarence Dold):
> | The uucp package on Convergent SysV (CTIX 5.x) includes a 'uugetty', that I 
> | appears to do, for cu and uucico.  C-Kermit doesn't agree with it, though.
> I just upgraded one of our SsyV systems to Honey-DANBER uucp, and it turns
> out all you need to do to make C-Kermit work properly with uugetty/uucico/etc.
> is to recompile ckutio.c with -DATT3BX.  This makes locks go in /usr/spool/locks
The problem I had with this scheme if I recall correctly, is that kermit had
to be suid uucp, in order to kill uugetty, a step in the outbound dialing.
If this was true, a shell spawned from kermit carried the effective id
of uucp, endangering some security.  A shell spawned from cu gives the 
original uid, rather than uucp. I thought I could hack the code, but gave up.

C-Kermit, 4E(070) 29 Jan 88, AT&T System III/System V

I never even looked at -DATT3BX.  I read from your message that this should be
a separate compile, outside of defining ATT3BX to the full Makefile.
I'll try that, but I wanted to post back to the net first, to avoid someone
inadvertently leaving a hole in security. 
-- 
Clarence A Dold - cdold@starfish.Convergent.COM		(408) 435-5274
		...pyramid!ctnews!mitisft!professo!dold
		P.O.Box 6685, San Jose, CA 95150-6685