[comp.os.vms] Security Patch for VMS

tencati@JPL-VLSI.ARPA.UUCP (06/08/87)

Submitted in the name of the common good that it will do, is "the patch".
If you have a user who can screw up your system by just looking at this
patch, then you have a larger security concern than the hole this patch
plugs.

Execute this from your system account.  If you are on a cluster system, change
"sys$sysroot" to "sys$common".

You assume full responsibility for execution of this command procedure, If you
don't want it, delete this message.

Something that fixes a serious bug deserves to be distributed as widely and 
quickly as possible.  


On my 11/780 running V4.5, I called this SECURESHR.PAT, then invoked it with 
DCL, and it worked fine.  A reboot is necessary following the patch.  It does
not delete anything from your system directories, and it makes its own copy
of secureshr.exe to patch.

Please do not send flames to me.  I've read enough already.

Ron Tencati
System Mgr, JPL-VLSI.ARPA
Jet Propulsion Laboratory
Pasadena, Ca.
-----------------------------cut here---------------------------------------
$ ON WARNING THEN EXIT
$ SET DEFAULT sys$sysroot:[SYSUPD]
$ COPY sys$sysroot:[SYSLIB]SECURESHR.EXE SECURESHR.EXE
$ PATCH/JOURNAL=SECURESHR/OUTPUT=SECURESHR SECURESHR
!	ECO05	LMPxxxx		23-Jan-1987
!		MODULE: SYSUAISRV
!		Additional tweaks to ECO04.
!
!	ECO04	LMP0429		14-Jan-1987
!		MODULE: SYSUAISRV
!		Minor tweaks to ECO03.  Also, tweaks to GRPPRV handling.
!
!	ECO03	LMP0424		16-Dec-1986
!		MODULE: SYSUAISRV
!		Properly handle the context field.

DEFINE GETUAI=7C40
DEFINE SETUAI=7C40+37C

SET ECO 03

REP/INS GETUAI+1B3
'	BLSSU	GETUAI+212'
EXIT
'	BRB	GETUAI+212'
EXIT

REP/INS SETUAI+1BD
'	BLSSU	SETUAI+21D'
EXIT
'	BRB	SETUAI+21D'
EXIT
UPDATE

SET ECO 04

REP/INS GETUAI+86
'	BLSSU	GETUAI+99'
EXIT
'	BRB	GETUAI+99'
EXIT

REP/INS SETUAI+81
'	BLSSU	SETUAI+96'
EXIT
'	BRB	SETUAI+96'
EXIT

REP/INS GETUAI+295
'	BBS	#2,B^0D4(FP),GETUAI+2C2'
EXIT
'	BBC	#2,B^0D4(FP),GETUAI+2A5'
EXIT

REP/INS SETUAI+2DC
'	BBS	#2,B^0D4(FP),SETUAI+303'
EXIT
'	BBC	#2,B^0D4(FP),SETUAI+2ED'
EXIT
UPDATE

SET ECO 05

REP/INS SETUAI+314
'	MOVL	#24,R0'
'	RET'
EXIT
'	MOVL	#24,(SP)'
'	BRW	SETUAI+50B'
EXIT

REP/INS SETUAI+329
'	MOVZWL	#291C,R0'
'	RET'
EXIT
'	MOVZWL	#291C,(SP)'
'	BRW	SETUAI+50B'
EXIT

REP/INS SETUAI+386
'	MOVL	#14,R0'
'	RET'
EXIT
'	MOVL	#14,(SP)'
'	BRW	SETUAI+50B'
EXIT

REP/INS SETUAI+3A0
'	MOVZWL	#290C,R0'
'	RET'
EXIT
'	MOVZWL	#290C,(SP)'
'	BRW	SETUAI+50B'
EXIT

REP/INS SETUAI+3AA
'	MOVZWL	#2914,R0'
'	RET'
EXIT
'	MOVZWL	#2914,(SP)'
'	BRW	SETUAI+50B'
EXIT

REP/INS SETUAI+471
'	MOVZWL	#28E4,R0'
'	RET'
EXIT
'	MOVZWL	#28E4,(SP)'
'	BRW	SETUAI+50B'
EXIT

REP/INS SETUAI+4D3
'	MOVL	#0C,R0'
'	RET'
EXIT
'	MOVL	#0C,(SP)'
'	BRW	SETUAI+50B'
EXIT
UPDATE

EXIT
$ INQUIRE OK "PRESS RETURN TO INSTALL THE NEW IMAGE"
$ COPY SECURESHR.EXE sys$sysroot:[SYSLIB]SECURESHR.EXE
$ DELETE SECURESHR.EXE.*
$ EXIT