From owner-freebsd-security  Mon Aug 13 10:46:14 2001
Delivered-To: freebsd-security@freebsd.org
Received: from db.nexgen.com (db.nexgen.com [66.92.98.149])
	by hub.freebsd.org (Postfix) with SMTP id F0AAE37B409
	for <freebsd-security@FreeBSD.ORG>; Mon, 13 Aug 2001 10:46:07 -0700 (PDT)
	(envelope-from ml@db.nexgen.com)
Received: (qmail 23634 invoked from network); 13 Aug 2001 17:45:51 -0000
Received: from localhost.nexgen.com (HELO alexus) (root@127.0.0.1)
  by localhost.nexgen.com with SMTP; 13 Aug 2001 17:45:51 -0000
Message-ID: <000b01c1241f$d0e74c90$0d00a8c0@alexus>
From: "alexus" <ml@db.nexgen.com>
To: "David Kirchner" <davidk@accretivetg.com>,
	"Ivan Krstic" <ike@gnjilux.srk.fer.hr>
Cc: <freebsd-security@FreeBSD.ORG>
References: <20010813093238.B38221-100000@localhost>
Subject: Re: bin user
Date: Mon, 13 Aug 2001 13:46:00 -0400
Organization: NexGen
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2526.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2526.0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

hm, i like yours is better the only question will it work from crontab?

----- Original Message -----
From: "David Kirchner" <davidk@accretivetg.com>
To: "Ivan Krstic" <ike@gnjilux.srk.fer.hr>
Cc: <freebsd-security@FreeBSD.ORG>
Sent: Monday, August 13, 2001 12:33 PM
Subject: Re: bin user


> On Mon, 13 Aug 2001, Ivan Krstic wrote:
>
> > On Mon, Aug 13, 2001 at 01:26:44PM -0400, alexus wrote:
> > > is it safe to allow user bin have shell but with password that no one
will
> > > know?
> >
> > [snip]
> > If the only reason to give the bin user a shell is so you can su to this
> > account, there's no need to assign a password at all.
>
> It'd probably be better to leave the shell as /sbin/nologin, and then just
> use 'su -m bin' to su to bin.
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message