[384] in SIPB_Linux_Development
Possible security problem with Moira
daemon@ATHENA.MIT.EDU (Erik Nygren)
Fri Feb 4 05:01:42 1994
To: bugs@MIT.EDU, linux-dev@MIT.EDU
Date: Fri, 04 Feb 94 05:01:26 EST
From: Erik Nygren <nygren@MIT.EDU>
I seem to have found what looks like a security problem of some
sort in Moira. Either that or it's a bug or i'm just being confused.
When using the new Machines menu on an Athena machine like a dialup,
I get permission denied when I try to do queries about machines (I shouldn't
have permission). However, if I use Moira under Linux on my home machine,
I have sufficient permission to do queries and possibly add cnames to
machines that are under my name. Luckily, I do not seem to have permission
to add machines.
This is probably no big deal, but I thought I'd point it out
in case it is an indication of a greater security problem....
--- Erik Nygren
___________________________________________________________________________
The most exciting phrase to hear in | Erik L. Nygren
science, the one that heralds new |
discoveries, is not "Eureka!" (I've | VOICE: 617/225-9395
found it!) but "That's funny ..." |
-- Isaac Asimov | EMAIL: <nygren@mit.edu>
