>Number:         4568
>Category:       misc
>Synopsis:       All traces of "secretmail" should be removed.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    misc-bug-people (Misc Bug People)
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sun Nov 23 19:50:01 1997
>Last-Modified:
>Originator:     Carl S. Shapiro
>Organization:
	Notwork Enterprises
>Release:        November 15, 1997
>Environment:
	
System: NetBSD seatbelt.notwork.net 1.3_ALPHA NetBSD 1.3_ALPHA (KUMQUAT) #0: Sat Nov 15 20:33:27 EST 1997 root@nothing.notwork.net:/usr/src/sys/arch/sparc/compile/KUMQUAT sparc


>Description:

As NetBSD does not ship any of the mickey-mouse secret mail
cryptographic programs (xsend, xget, enroll), there is no good
reason to keep /var/spool/secretmail.

The old SunOS man page for xsend, xget, and enroll mentions that 
the cryptosystem used by these programs is "breakable".

>How-To-Repeat:

Observe the presense of /var/spool/secretmail, and the lack of
xget(1), xsend(1), and enroll(1).

>Fix:

Remove /var/spool/secretmail from /usr/src/distrib/sets/base/mi
and the secretmail referece in hier(7) man page.  There may be
other places where secret mail appears?
>Audit-Trail:
>Unformatted: