[comp.unix.xenix.sco] PROBLEM WITH MKUSER - SECURITY

bobb@netcom.COM (Bob Beaulieu) (04/30/91)

I have a client that had a lot of users (80+) in the same group "group1"
and added '\' to allow entry of ALL of these users because of limits in
line lengths.

Each time he runs the mkuser program provides by sco, the program edits
the group file and adds:

::0::  name1, name2, name3, name4, name5, name6, ... name20
::0::  name21, name22, name23, ... namexx

All these users now have to do is type:

newgrp root 

and just about everything is at the hands!

I have been able to verify this on other 386 2.3 sco boxes. The old
group file is renamed to "group-".

Any comments?????
bobb

-- 
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|                              Bob Beaulieu                            |
|                              San Jose, CA.                           |
|                             (408) 723-0556                           | 
|                             bobb@netcom.com                          |
|                   {apple,amdahl,claris}!netcom!bobb                  |
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

paulz@sco.COM (W. Paul Zola) (05/07/91)

In article <1991Apr30.064959.1532@netcom.COM> bobb@netcom.COM (Bob Beaulieu) writes:
}I have a client that had a lot of users (80+) in the same group "group1"
}and added '\' to allow entry of ALL of these users because of limits in
}line lengths.

[description of the resulting disaster deleted]

}
}bobb
}

Like the man says, don't *do* that!  You should never use
continuation characters in /etc/group: nothing that manipulates
it understands them.  Instead use multiple lines with the same
group name:

    group1::60:user1,user2,user3
    group1::60:user4,user5,user6

This should work just fine.  

-
Paul Zola			Support Technical Lead, Operating System
				paulz@sco.COM 
Gotta tend the earth if you want a rose.  - Emily Saliers
    DISCLAIMER: I speak for myself, and not for SCO.