SPAWN command within VMS MAIL

Article View: mod.computers.vax

Article #3807

#3807

From: PRITCHAR
Date: Tue, 17 Mar 1987 19:12

20 lines
1515 bytes

>Date:         Mon, 16 Mar 87 13:53 EDT
>Comments:     To: INFO-VAX@SRI-KL.ARPA
>From:         "Paul D. Clayton" <CLAYTON%XRT.UPENN.EDU@CIS.UPENN.EDU>
>Subject:      Mail Enhancement To Eliminate SPAWN Command.

>Last week I reached by limit with people getting to DCL through MAIL and
>traveling around the system with excessive privileges. The net result was time
>spent with the fiche and patching the MAIL image so as to disable the SPAWN
>command. Note that this only removes the SPAWN command from MAIL, and as far
>as I have been able to tell, does not impact other aspects of MAIL
>operation.

If you've established the accounts as CAPTIVE (with AUTHORIZE), then MAIL
won't allow the use of the SPAWN command (under 4.4 and 4.5, at least).

                Hugh Pritchard
                Catholic University of America
                Washington, DC
                (202) 635-5373
                PRITCHAR@CUA.BITNET

Technical Details

Message-ID: <8703181104.AA04030@ucbvax.Berkeley.EDU>

Path: arc1-ca.pugleaf.net!utzoo!mnetor!seismo!rutgers!ames!ucbcad!ucbvax!CUA.BITNET!PRITCHAR

Show Full Headers

Complete Article Headers

Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: arc1-ca.pugleaf.net!utzoo!mnetor!seismo!rutgers!ames!ucbcad!ucbvax!CUA.BITNET!PRITCHAR
From: PRITCHAR@CUA.BITNET
Newsgroups: mod.computers.vax
Subject: SPAWN command within VMS MAIL
Message-ID: <8703181104.AA04030@ucbvax.Berkeley.EDU>
Date: Tue, 17-Mar-87 14:12:00 EST
Article-I.D.: ucbvax.8703181104.AA04030
Posted: Tue Mar 17 14:12:00 1987
Date-Received: Thu, 19-Mar-87 06:42:08 EST
Sender: daemon@ucbvax.BERKELEY.EDU
Distribution: world
Organization: The ARPA Internet
Lines: 20
Approved: info-vax@sri-kl.arpa