[671] in Athena Bugs
RT 6.0C: extra files and security holes
daemon@ATHENA.MIT.EDU (probe@ATHENA.MIT.EDU)
Sun Aug 28 21:05:30 1988
From: <probe@ATHENA.MIT.EDU>
Date: Sun, 28 Aug 88 21:05:03 EDT
To: bugs@ATHENA.MIT.EDU
Reply-To: Richard Basch <probe@ATHENA.MIT.EDU>
The following files should not exist:
/usr/new/xclock
/usr/new/xinit
/usr/new/xnwm
/usr/new/xset
There are copies of all of these except the ancient "xnwm" in
/usr/bin/X11.
The following should not be setuid root:
/usr/bin/X11/xload -- should be setgid kmem instead
/usr/bin/X10/xinit -- should be mode 0755 for security reasons
/usr/new/xinit -- shouldn't exist (read above)
-Richard
