KVC@ENGVAX.SCG.HAC.COM.UUCP (04/11/87)
The problem with printing from MAIL is not that you can't specify the queue,
but that you CAN specify the queue -- with /QUEUE=. Try sending the following
mail "text" to your favorite captive account:
$ show process/all
$ exit
log into the captive account, get into MAIL and try PRINT/QUEUE=SYS$BATCH.
Most intense if the captive account can do offensive things from DCL.
To close this one you need to disallow batch access to the captive account
with something like MCR AUTHORIZE captive-account-name/NOBATCH. If your
captive account needs batch access, then you'll have to close this off some
other way.
Note: no flames about sending security holes to INFO-VAX. This one and
it's fix, are pretty obvious. Security through ignorance is no
security at all, folks!
/Kevin Carosso kvc@engvax.scg.hac.com
Hughes Aircraft Co. or kvc%engvax@usc-oberon.arpa