I also had security problems with SGIs at first, but found it fairly
easy to plug the holes. I found the public domain program SATAN
extremely useful for checking for security leaks as was monitoring the
newsgroup comp.sys.sgi.admin. (I got my copy of SATAN from
ftp://ftp.ox.ac.uk/pub/comp/security/software/satan - you will also need
a WWW browser and PERL5 to run this)
SGI insist on shipping them in a very unsafe manner so could I make a
PLEA to the instrument manufacturers, for the sake of yours and the
customer's peace of mind could you fix the security holes BEFORE
shipping spectrometer, eg. not having 'xhost +' as default, not having
accounts such as lp, uucp, etc without passwds, limiting nfs mounts by
specifying hosts in exportfs, not shipping with obvious root passwords,
etc. etc.
I have put some information gleaned fom postings in comp.sys.sgi.admin
on my ftp server in case you are interested, try looking at: * using
FTP ftp://tesla.york.ac.uk/pub/security or * using WWW
http://www.york.ac.uk/depts/chem/nmr/security.html
Best regards,
Graham Barlow
+----------------------==============================================+
| Dr. Graham Barlow | |
| NMR Service Manager | e-mail: gkb1@york.ac.uk |
| Dept. of Chemistry | Telephone: +44 (0)1904 432506 DDI |
| University of York | Fax: +44 (0)1904 432516 |
| Heslington, YORK, UK | WWW: http://www.york.ac.uk/depts/chem/nmr |
+----------------------+=Mime OK ====================================+