COMMAND
	    sysinstall
SYSTEMS AFFECTED
	    FreeBSD 2.1, 2.1.5, 2.1.6, 2.1.7, 2.2 and 2.2.1.
PROBLEM
	    Sysinstall is used both for fresh installations of FreeBSD as well
	    as post installation updates, like installing packages from  CDROM
	    or ftp sites.
	    One of the port installation  options in sysinstall is to  install
	    an anonymous ftp setup  on the system. In  such a setup, an  extra
	    user  needs  to  be  created  on  the system, with username 'ftp'.
	    This user is  created with the  shell equal to  '/bin/date' and an
	    empty  password.   Under  some  circumstances,  this  will   allow
	    unauthorized access of system resources.
SOLUTION
	    This is corrected in all versions as of 1997-04-01. This  includes
	    the installation floppies for FreeBSD 2.2.1 found on:
	
	        ftp://ftp.FreeBSD.org/pub/FreeBSD/2.2.1-RELEASE/floppies/newer/
	
	    Also the CDROM of FreeBSD 2.2.1 has this problem corrected.
	    You can also change the entry of the ftp user such that is has  an
	    invalid  password  and  an  invalid  shell.  This  can  be done by
	    becoming the superuser, and use  the vipw command. Go to  the line
	    that starts with ftp::  and  change ftp:: to ftp:*:  Also  change,
	    on the same line, the shell from /bin/date to /nonexistent.
	    If you  have not  yet used  sysinstall to  create an anonymous ftp
	    setup, but  are planning  to, please  apply one  of the  following
	    patches:
	    Patch for FreeBSD 2.1.5, 2.1.6, 2.2 and 2.2.1:
	
	    --- anonFTP.c       1996/04/28 03:26:42     1.14
	    +++ anonFTP.c       1997/04/07 17:20:16
	    @@ -195,7 +195,7 @@
	        return (DITEM_SUCCESS);         /* succeeds if already exists */
	        }
	    -    sprintf(pwline, "%s::%s:%d::0:0:%s:%s:/bin/date\n", FTP_NAME, tconf.uid, gid, tconf.comment, tconf.homedir);
	    +    sprintf(pwline, "%s:*:%s:%d::0:0:%s:%s:/nonexistent\n", FTP_NAME, tconf.uid, gid, tconf.comment, tconf.homedir);
	        fptr = fopen(_PATH_MASTERPASSWD,"a");
	        if (! fptr) {
	
	    Patch for FreeBSD 2.1:
	
	    --- anonFTP.c       1995/11/12 07:27:55     1.6
	    +++ anonFTP.c       1997/04/03 19:29:21
	    @@ -201,7 +201,7 @@
	         return (RET_SUCCESS);  /* succeeds if already exists */
	        }
	    -   sprintf(pwline, "%s::%s:%d::0:0:%s:%s:/bin/date\n", FTP_NAME, tconf.uid, gid, tconf.comment, tconf.homedir);
	    +   sprintf(pwline, "%s:*:%s:%d::0:0:%s:%s:/nonexistent\n", FTP_NAME, tconf.uid, gid, tconf.comment, tconf.homedir);
	        fptr = fopen(_PATH_MASTERPASSWD,"a");
	        if (! fptr) {