From: zen@death.corp.sun.com (d) Newsgroups: alt.security Subject: Re: COPS bug? in dev.chk - here's a fix Date: 10 Sep 92 18:22:29 Message-ID: References: <1992Sep10.143408.517@dragon.acadiau.ca> <1992Sep11.003003.9474@tamsun.tamu.edu> In article <1992Sep11.003003.9474@tamsun.tamu.edu> steve@donald.tamu.edu (Steve Rikli) writes: > I spoke with the author of Cops, Dan Farmer, via email about this last > April... > [...] > He said this is what will be used in the next version. Speaking of which, > hmmmm?? ;-) Anyhow, I've put this fix in, and it does the Right Thing. April? Has it been that long since the last release? Longer, you say? Sigh. Anyone want to give me a sabbatical? There's so much more I want to put in... > There was some question whether all unices actually treat '#' as comments, > but he didn't think it was a problem. Brings up another point -- people keep asking me if "#"'s are comments in .rhost files. They aren't, unless you're running a newer/more intelligent version of unix than most (I think 4.3+ does the right thing.) So if someone can masquerade their machine name as a pound sign, they're in. Just FYI. -- d p.s. sun nuked my division's travel budget, so I won't be at this security usenix. Sorry to all the people I told that I was going to eat, drink, and be merry with :-(