PRITCHAR@CUA.BITNET (03/17/87)
>Date: Mon, 16 Mar 87 13:53 EDT >Comments: To: INFO-VAX@SRI-KL.ARPA >From: "Paul D. Clayton" <CLAYTON%XRT.UPENN.EDU@CIS.UPENN.EDU> >Subject: Mail Enhancement To Eliminate SPAWN Command. >Last week I reached by limit with people getting to DCL through MAIL and >traveling around the system with excessive privileges. The net result was time >spent with the fiche and patching the MAIL image so as to disable the SPAWN >command. Note that this only removes the SPAWN command from MAIL, and as far >as I have been able to tell, does not impact other aspects of MAIL >operation. If you've established the accounts as CAPTIVE (with AUTHORIZE), then MAIL won't allow the use of the SPAWN command (under 4.4 and 4.5, at least). Hugh Pritchard Catholic University of America Washington, DC (202) 635-5373 PRITCHAR@CUA.BITNET