Newsgroups: comp.os.linux.development,comp.os.linux.admin,comp.os.linux.help,comp.os.linux.misc,comp.os.linux.announce
From: magnus@cegt201.bradley.edu (Mohan Kokal)
Subject: Re: WARNING about shadow-mk package
Message-ID: <ann-10144.778962069@cs.cornell.edu>
Date: Wed, 7 Sep 1994 18:21:33 GMT
Approved: linux-announce@tc.cornell.edu (Matt Welsh)

A new release of the package has been uploaded on to :

ftp.procyon.com:/pub/linux/shadow/shadow-mk.tar.gz

This release has the source code for the login.secure program mentioned
by bjdouma@xs4all.nl  (Bauke Jan Douma) . The program is abosolutely harmless
and the earlier posts were just an over reaction. If you already have the
package installed from before today, then you do *not* have to get rid of
your /bin/login [which is login.secure] . /bin/login in the mk package
is a wrapper type of program that gets rid of the original /bin/login security
holes of -froot and -h.

Also in this package, the file perms have been fixed for the /bin/login and
/bin/_login files. If you have :

/bin/login as mode 4711 and
/bin/_login as mode 4755

then please change this to

/bin/login as mode 4511 and
/bin/_login as mode 4500

For those of you curious about the login.secure program, the original posting
with the source code is available on ftp.procyon.com in the directory
/pub/linux/shadow as login.secure.gz . As mentioned before, the source code is
also available in the latest release of shadow-mk.

If you have any questions , please email me at any of the following addresses:
magnus@bradley.edu
magnus@cegt201.bradley.edu
-- 
Consistency Is Victory. 
magnus@cegt201.bradley.edu		 		-Mohan Kokal
--
Send submissions for comp.os.linux.announce to: linux-announce@tc.cornell.edu
Be sure to include Keywords: and a short description of your software.
