Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Mar 2001 12:14:05 +0200 (EET)
From:      Domas Mituzas <domas.mituzas@delfi.lt>
To:        Matt Heckaman <matt@LUCIDA.CA>
Cc:        mudman <mudman@R181204.resnet.ucsb.edu>, freebsd-security@FreeBSD.ORG
Subject:   Re: /etc/pwd.db
Message-ID:  <Pine.BSF.4.21.0103021212400.87639-100000@axis.tdd.lt>
In-Reply-To: <Pine.BSF.4.33.0103020316130.71111-100000@epsilon.lucida.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> Better yet: pwd.db doesn't even contain any passwords! It's the functional
> equiv. of /etc/passwd. spwd.db contains the real passwords and is mode
> 0600 root:wheel. :)

actually if you keep some fake MD5 strings in $FTPROOT/etc/passwd it would
be a nice trap for all wannabe's (and also will point out totally stupid
clients ;-)

Cheers,
Domas


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0103021212400.87639-100000>