[mod.computers.vax] Security Hole Announcements

zar%Xhmeia@CIT-HAMLET.ARPA (11/12/85)

I would agree and disagree. Publishing notices about VMS security bugs
that have work-arounds or fixes without waiting for DEC to come out
with a new version should be published with the fix. Problems that are
not possible to fix by changing the system environment should not be
sent to this forum. I'd prefer to read it in the System Update notices
DEC publishes.

The last message indicated some problems with ACL protection on the
system log nam table. I assume that one of the fixes is to set the
tables protection to keep normal users from causing havoc on the sys
log nam table. The other problem he indicated sounded like there would
be other easy fixes. I'm glad that message was sent to info-vax.

					From The Great
					     Zar