Subject: Re: WARNING about shadow-mk package
From: [email-masked] (Mohan Kokal)
Date: Wed, 7 Sep 1994 18:21:33 GMT
Newsgroups: comp.os.linux.development,comp.os.linux.admin,comp.os.linux.help,comp.os.linux.misc,comp.os.linux.announce

A new release of the package has been uploaded on to :

ftp.procyon.com:/pub/linux/shadow/shadow-mk.tar.gz

This release has the source code for the login.secure program mentioned
by [email-masked]  (Bauke Jan Douma) . The program is abosolutely harmless
and the earlier posts were just an over reaction. If you already have the
package installed from before today, then you do *not* have to get rid of
your /bin/login [which is login.secure] . /bin/login in the mk package
is a wrapper type of program that gets rid of the original /bin/login security
holes of -froot and -h.

Also in this package, the file perms have been fixed for the /bin/login and
/bin/_login files. If you have :

/bin/login as mode 4711 and
/bin/_login as mode 4755

then please change this to

/bin/login as mode 4511 and
/bin/_login as mode 4500

For those of you curious about the login.secure program, the original posting
with the source code is available on ftp.procyon.com in the directory
/pub/linux/shadow as login.secure.gz . As mentioned before, the source code is
also available in the latest release of shadow-mk.

If you have any questions , please email me at any of the following addresses:
[email-masked]
[email-masked]
-- 
Consistency Is Victory. 
[email-masked]		 		-Mohan Kokal
--
Send submissions for comp.os.linux.announce to: [email-masked]
Be sure to include Keywords: and a short description of your software.