Path: utzoo!attcan!uunet!seismo!sundc!rlgvax!hadron!jsdy From: jsdy@hadron.UUCP (Joseph S. D. Yao) Newsgroups: comp.unix.wizards Subject: Re: Implications of recent virus (Trojan Horse) attack Summary: ::0:0::: Keywords: virus security Message-ID: <809@hadron.UUCP> Date: 22 Nov 88 15:41:41 GMT References: <1698@cadre.dsl.PITTSBURGH.EDU> <2151@ficc.uu.net> <8845@smoke.BRL.MIL> <14465@mimsy.UUCP> <1723@cadre.dsl.PITTSBURGH.EDU> <445@auspex.UUCP> <1729@cadre.dsl.PITTSBURGH.EDU> <452@auspex.UUCP> Reply-To: jsdy@hadron.UUCP (Joseph S. D. Yao) Distribution: na Organization: Hadron, Inc., Fairfax, VA Lines: 28 In article <452@auspex.UUCP> guy@auspex.UUCP (Guy Harris) writes: < >Excuse ME, but the last four lines of my SunOS 4.0 distribution tape < >password file are: < > +::0:0::: < > ::0:0::: < > ::0:0::: < > ::0:0::: > ... All of them had > +: >as the last line in the password file ... >I tried "passwd" ... >turned it into > +::0:0::: A lot of people - and some editor programs - have the terrible habit of leaving a blank line at the end of a file after editting it. The 'passwd' program, at least all versions that I know of, tends to turn this into the offending line. This happens because getpwent() returns a blank pwd entry, and putpwent() or the printf() used insert the colons. I'd suggest that all getpwent()'s skip over blank lines completely. Joe Yao jsdy@hadron.COM (not yet domainised) hadron!jsdy@{uunet.UU.NET,dtix.ARPA,decuac.DEC.COM} arinc,att,avatar,blkcat,cos,decuac,dtix,\ ecogong,empire,gong,grebyn,inco,insight, \!hadron!jsdy kcwc,lepton,netex,netxcom,phw5,rlgvax, / seismo,sms,smsdpg,sundc,uunet /