francus@pernod.dec.com (Yoseff Francus) (11/14/88)
>Subject: Re: Implications of recent virus (Trojan Horse) attack >Organization: Decision Systems Lab., Univ. of Pittsburgh, PA. > >:In article <445@auspex.UUCP: guy@auspex.UUCP (Guy Harris) writes: >::Or, to keep someone else from doing this, remove lines like: >:: >::::0:0:: >:: >::from your password file. Most Sun systems have this as a default >::(stupid!). >: >:Excuse me, but to what are you referring? Most Sun systems have a line >:like >: >: +::0:0::: >: >:as a default, but this is INequivalent to >: >: ::0:0:: >: >Excuse ME, but the last four lines of my SunOS 4.0 distribution tape >password file are: > > +::0:0::: > ::0:0::: > ::0:0::: > ::0:0::: > If I remember correctly, once YP sees a line beginning with +: the lines after it in the password file are ignored. So, although any line of ::0:0::: is potentially BAD news when you are running YP this problem woudn't apply. I would remove those lines pronto whether or not you're running YP. >NeXT? > >Sean McLinden >Decision Systems Laboratory Yoseff Francus In Xanadu did Kubla Khan A stately pleasure dome decree But only if the NFL To a franchise would agree yf%pernod.dec@decwrl.dec.com