[comp.sys.apollo] Interesting security feature

cander@unisoft.UUCP (Charles Anderson) (12/01/89)

Last night I was dialed into an Apollo (DN3500 running SR 10.1) and I
got a a message that read something like: "Changing tty pgrp from xxx
to yyy".  The next thing I knew I was running a root shell!  If it
weren't for the fact that I already have the root password, I would
consider this a real gift from the gods.  ps -augx revealed nothing of
my original shell.  It is possible that this was left over some some
previous login that got terminated prematurely due to modem troubles.

The other potentially significant item to note is that I was running
UW, which is a set of programs that allow you to have multiple windows
on a Mac attached to multiple pty's on a Unix (BSD) server, all
multiplexed on one serial line.  The message sounds like its related to
process group handling, which UW must do a bit of.  I have never
seen this before running UW on Apollos or Suns.

I wish I knew what casued it and how to repeat it, but alas it seemed
to be a freak.  Has anyone else ever seen anything like this?

Given how security conscious Apollo is, I thought this might be
interesting.  Out of curiousity, is there some kind of mail address
(like apollo!bugs) to send bug reports to? 

-- 

Charles.
{sun, ucbvax, pyramid, uunet}!unisoft!cander