Re: bin user

From: Ivan Krstic (ike@gnjilux.srk.fer.hr)
Date: 08/13/01 

From: Ivan Krstic <ike@gnjilux.srk.fer.hr>
Date: Mon, 13 Aug 2001 19:34:29 +0200
To: freebsd-security@freebsd.org

On Mon, Aug 13, 2001 at 01:26:44PM -0400, alexus wrote:
> is it safe to allow user bin have shell but with password that no one will
> know?

[snip]
If the only reason to give the bin user a shell is so you can su to this
account, there's no need to assign a password at all. The shadow file entry
illustrates this:
bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin

Note the second field is an asterisk, which is an impossible hash (no password
will ever match). So, just assign this user a valid shell, and leave the
password the way it already is.

Best regards, 

-- 
Ivan Krstic - ike 
" life is the road beneath my feet, 
  love is the girl I wait to meet, 
  and art is everything I create, 
  rob me of any and I will hate, 
  you, my God, my devil, my fate " 
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • Re: bin user
    ... >> is it safe to allow user bin have shell but with password that no one will ...
    (FreeBSD-Security)
  • Re: US Buoyancy
    ... waivers for this very reason. ... Rowing is a POTENTIALLY risky enterprise. ... When a through-flow shell takes on even a little water, ...
    (rec.sport.rowing)
  • Re: Great SWT Program
    ... I then have a shell running as root, ... prompt for the root password when run by a regular user. ...
    (comp.lang.java.programmer)
  • Re: [patch] rc.d/tmp (silly mkdir usage)
    ... I don't see any reason to fork ... > file creation. ... > I just wonder why a new shell is forked for this test. ... Therefore mkdir was used as a work-around. ...
    (freebsd-hackers)
  • Re: about system()
    ... In this case Perl runs the default shell for the OS and has it run command. ...
    (perl.beginners)