Re: Compromise of the nobody account?

On Jan 26, 5:52 pm, Grant <g_r_a_n...@xxxxxxxxxxx> wrote:
On Sat, 26 Jan 2008 16:13:46 -0800 (PST), mike3 <mike4...@xxxxxxxxx> wrote:
Hi.

How bad it is it if one can't trust the "nobody" account on a UNIX or
Unix-like system, and said account has been broken into and is being
used to access the system? Should one just dump the account, then? Is
it bad practice to leave the "nobody" account unguarded?

Huh?  What can you do as 'nobody' without a shell?


So then I take that it's NOT a good idea to have a nobody account
with a shell on it, right? How much damage can a cracker do from a
nobody account that they've gotten into and that has a shell on it?


.

Relevant Pages

  • Re: why is the nobody account password-protected?
    ... ]On Solaris and GNU/Linux at least, the nobody account has a single ... ]character password -- why? ... allowed to use that account. ... It is for use onlyby root. ...
    (comp.security.unix)
  • Re: Compromise of the nobody account?
    ... Unix-like system, and said account has been broken into and is being ...  What can you do as 'nobody' without a shell? ... So then I take that it's NOT a good idea to have a nobody account ...
    (comp.security.unix)
  • Re: Crash upon accessing View menu in Windows Explorer
    ... if the same thing happens with another admin account it may ... > 1) The problem occurs not just in Windows Explorer and My Computer, etc., ... > 4) I checked which Shell Extensions (using the Shell Viewer program you ... > similar Shell Extension called $Address, ...
    (microsoft.public.windowsxp.general)
  • Re: Crash upon accessing View menu in Windows Explorer
    ... own account. ... I checked which Shell Extensions (using the Shell Viewer program you ... similar Shell Extension called $Address, also a Shell Browser UI ...
    (microsoft.public.windowsxp.general)
  • RE: User?s and Shells
    ... the shell as well the password for an account. ... Disabling the password makes ... The ideal solution is to have a binary program for the account shell ... defense in depth/layers is the key to security. ...
    (Focus-Linux)