[Networker] NSR_BLOCK_ADMIN/NSR_REQUIRE

All-

A couple old security vulnerabilities from 2005 (I think LGTpa78968 was
one of them) required that you modify your networker startup script for
nsrexecd so that both NSR_BLOCK_ADMIN=YES and NSR_REQUIRE_ROOT=YES were
set and exported.

I remember specifically that the release notes for the fix indicated that
these environment variables were required to complete the fix, and the
need for the environment variables would go away with some future release,
when a full fix was implemented.

So, does anyone know if the need for those environment variables ever went
away, and if so, what was the release at which they were no longer needed?

Thanks,

Tim
--
Tim Mooney                                        Tim.Mooney AT ndsu DOT edu
Information Technology Services                   (701) 231-1076 (Voice)
Room 242-J6, IACC Building                        (701) 231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164

To sign off this list, send email to listserv AT listserv.temple DOT edu and type 
"signoff networker" in the body of the email. Please write to networker-request 
AT listserv.temple DOT edu if you have any problems with this list. You can access the 
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
[Networker] NSR_BLOCK_ADMIN/NSR_REQUIRE_ROOT still needed ?
