cathyf@rice.edu (Catherine A. Foulston) (05/25/90)
My B News regularly core dumps, because for reasons unexplained, cancel does not work. Seg faults every time. (We are at PL 18.) I was paging through the core file (actually "strings $SPOOLDIR/.bad/core | more") when I found that it contained the entire contents of our password file. Is this normal for B News? Is it normal in general for programs that use stuff from /etc/passwd? We usually have a core file in there. It seems a bit of a security problem, if only because people who worry about password files might not know there was a copy there. Also, don't people who use the NFS options for news mount the spool directory on other machines? This would mean giving password file access to machines that otherwise might not have it. And, is there anything that can be done about it other than trying to fix cancel and cleaning out .bad often? Cathy -- Cathy Foulston =|=|= cathyf@rice.edu =|=|= cathyf@ricevm1 (bitnet) Rice University, Network and Systems Support