VMSNEWS      Release 5.2                26-Apr-1988

Author  : Geoff Huston
Address : Computer Services Centre
          Australian National University
          G.P.O. Box 4, Canberra City, A.C.T.  2601
          AUSTRALIA

          (062)492763

    ACSnet,CSNET:	gih900@fac.anu.oz
    INTERNET: gih900%fac.anu.oz@uunet.uu.net
    UUCP: {uunet,ubc-cs,nttlab,mcvax,ukc}!munnari!fac.anu.oz!gih900
    VAX_PSI: PSI%505262440032::gih900

|  NEWS, Copyright (c) Geoff Huston, Australian National University, 1987,1988|

The files in this save set build the complete news system on VMS. This is NOT
set up as a VMS INSTALLable product.

The software is distributed in the source, object and executable formats.
It will require the installation of a number of logical names and site
specific configuration files, and a number of DCL procedures to be defined
at each site.

For a list of files in the distribution, and the installation procedure
please read the installation instructions contained in the file NEWS.DOC.

SECURITY ISSUES

It is intended that NEWS be run as an INSTALLed image with SYSPRV enabled, so
as to control write access to the NEWS database files. (all news text files are
readable without privs). All care has been taken to prevent users being able to
get to DCL level with SYSPRV, or to read or write arbitrary files using SYSPRV.
The way in which this is achieved is that NEWS executes with SYSPRV not enabled
- you will see in the code calls to nosysprv() and sysprv() around code areas
which require SYSPRV to access files. 

If you do not wish all users on your system to read all items in the NEWS
database, then the directories of the relevant newsgroups can be protected via
ACLs (As SYSPRV is NOT used to read text files within NEWS, the ACLS will be
effective in barring read accedd to the item text). 

Control message - the following control messages are implemented:

    cancel
    Is executed automatically.

    newgroup
    Is implemented by mailing DCL COM file to address USENET.
    The news manager is expected to check this operation then execute it to
    bring the local database into line with the wider net.

    rmgroup
    Implemented by posting a "cleanup" command procedure to the USENET account.
    The news manager is expected to edit this procedure then execute it to
    bring the local database into line with the wider net.

    sendsys
    Automatic reply generation implemented.

    senduuname
    Not that relevant - is implemented as a generated negative reply

    version
    Automatic reply generation implemented

    checkgroups
    Implemented by posting a "cleanup" command procedure to the USENET account.
    The news manager is expected to edit this procedure then execute it to
    bring the local database into line with the wider net.

    ihave/sendme
    Automatic sendme reply generated in response to received ihave message.
    ihave control messages may be generated to feed sites.