OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: [8lgm]-Advisory-7.UNIX.passwd.11-May-1994

Re: [8lgm]-Advisory-7.UNIX.passwd.11-May-1994

John Hawkinson (jhawkpanix.com)
Fri, 13 May 1994 15:25:51 -0400 (EDT)

> From: Howie Kaye <howieivory.cc.columbia.edu>
> To: bugtraqcrimelab.com, certcert.org, security-alertsun.com
> Cc: cu-usagcolumbia.edu

> Since SUNs come with a yppasswd program which is also suid'ed (and is
> bit for bit identical to passwd -- chfn, chsh, ypchfn, ypchsh are all
> links to passwd, but yppasswd is a separate copy.), it needs to be
> updated also.

This is true. I recommend doing what we at Panix have always done --
made yppasswd a hard link to passwd, just like all the other yp and ch
junk. There does not seem to be a good reason to do otherwise, unless
there were permissions considerations.

--
John Hawkinson
jhawkpanix.com