tpn+@andrew.cmu.edu (Tom Neuendorffer) (03/01/90)
IMPORTANT
The recent post by Bill Janssen indicates a major security hole that
calls for immediate action by all Andrew administrators.
The tm.do objects should be removed from all installed dlibs until such
time as the following fix is made.
The fix is to remove the following lines from the termulator__Read
method in tm.c
if(termulator_StartProcess(self,args)!=0)
return dataobject_OBJECTCREATIONFAILED;
A patch to do this will be included in the soon-to-be released patch004.
Meanwhile you should either fix tm by hand or remove tm.do entirely.
Installing this patch will not affect the normal operation of termulator.
Sorry for the inconvenience. This is the kind of problem that
contributed software in this system can lead to.
Tom Neuendorffer
Manager , ATK group, ITC/CMU