[3979] in Athena Bugs
XLogin source
daemon@ATHENA.MIT.EDU (cfields@ATHENA.MIT.EDU)
Mon Jan 15 21:00:49 1990
From: cfields@ATHENA.MIT.EDU
Date: Mon, 15 Jan 90 21:00:35 -0500
To: bugs@ATHENA.MIT.EDU, jik@ATHENA.MIT.EDU
I was poking around the afs directories the other day, and found that
the source to xlogin in /afs/athena.mit.edu/astaff/project/xdm (and
everything in that directory) is world readable. This greatly
facilitates the writing of login Trojan Horses. So if you're concerned
about that...
Craig
