Uuclean Uucp Spool Directory Cleanup; Security - Sun Microsystems Sun Workstation 100U System Manager's Manual

UULOG - UUCP Log Inquiry UUCP Implementation Description
The intersection of lines satisfying the two options is output. A null
'11'
or a,e, means all sys-
tem names or users respectively.
Debugging options available are:
-xnum
-n.ee.
Num is a level number between 1 and 0; higher numbers give more debug out-
put.
Time out lock on log file if older than .ee. seconds.
7.
UUCLEAN - UUCP Spool Directory Cleanup
Vuelean is typically started by the uuep daily daemon. Its function is to remove files from the
spool directory that are more than three days old. These are usually files for work that can not
be completed. The requester of this work is notified that the files have been deleted.
There are several options:
-<idi, The directory to be scanned is di,.
-m Send mail to the owner of each file being removed. Note that most files put into
the spool directory are owned by the owner of the uuep programs since the
setuid bit will be set on these programs. This mail is sometimes useful for
administration .
. -nhour, Change the aging time from
72
hours to hour. hours.
-ppre Examine files with prefix p,e for deletion. Up to 10 of these options may be
specified.
-x num This is the level of debugging output desired.
8. Security
=t
The uuep ,ydem, left unredrieted, tIliU let
dnr
out,ide
a,e, ezeeute dny
eommdnd,
dnd
copy
out/ in any {de that
i,
readable/writable by a uuep login u,er. It i. up to the individual .ite. to 6e
aware
0/
thi, and apply the protection, that they/eel are neee"dry.
There are several security features available aside from the normal file mode protections. These
must be set up by the administrator of the uuep system.
• The login for uuep does not get a standard shell. Instead, the aueieo program is started so
that all work is done through uueieo.
• The owner of the uuep programs should be an administrative login. It should not be one of
the logins used for remote system access to uucp.
• All uucp logins should have passwords.
• A path check is done on file names that are to be sent or received. The USERFILE supplies
the information for these checks. The USERFILE can also be set up to require call-back for
certain login-ids. See the "Files Required For Execution" section for the file description.
•
A conversation sequence count can be set up so that the called system can be more confident
of the caller's identity.
• The uuzqt program reads a file containing a list of commands that it will execute. A
"P ATH" shell statement is prep ended to the command line as specified in the auzqt pro-
gram. The installer may modify the list or remove the restrictions as desired.
10
7 January 1984