Yet another finger hole

[Juergen Wagner]

Why bother to change in.fingerd? The easiest fix would be to change
*finger* to setuid/setgid nobody, and if you don't like the uid 65534
reports, makeup a new user/group 'finger' with a unique uid/gid. Until you
fix the source of 'finger', this will do. And if you are fixing the
source, you could disallow all symbolic links for .plan/.project (easy fix
if you have source).

Juergen Wagner		gandalf at csli.stanford.edu
			wagner at arisia.xerox.com