Path: utzoo!attcan!utgpu!jarvis.csri.toronto.edu!rutgers!gatech!bloom-beacon!tut.cis.ohio-state.edu!brutus.cs.uiuc.edu!wuarchive!wugate!dinorah!art From: art@dinorah.wustl.edu (Arthur B. Smith) Newsgroups: comp.unix.ultrix Subject: Does 3.1 fix security prob. in 3.0? Keywords: chfn chsh domainname Message-ID: <940@dinorah.wustl.edu> Date: 14 Aug 89 14:23:06 GMT Organization: Washington University (St. Louis) Lines: 17 Several months ago, when Ultrix 3.0 was the latest greatest thing, DEC sent out a "Mandatory Workaround" to avoid problems from chfn, chsh and domainname. Now we have Ultrix 3.1 (which replaced chfn and chsh, but not domainname). I called DEC Software Support in Atlanta this morning, and they not only didn't know if 3.1 fixed these bugs, they didn't know anything at all about the bugs in 3.0....! They have the call out to some other part of the company to find out about this, but expect it to take several days. Does anyone out there in Netland know whether Ultrix 3.1 fixed any or all of these problems? -art smith (art@dinorah.wustl.edu, ...!uunet!wucs1!dinorah!art) "DEC -- not only doesn't their right hand know what the left hand is doing, it is surprised to find out there IS a left hand." -me Usual disclaimers....