Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Mar 2001 14:48:09 +0000
From:      Jamie Heckford <heckfordj@psi-domain.co.uk>
To:        "Andy [ TECC NOPS ]" <andy@tecc.co.uk>
Cc:        freebsd-isp@freebsd.org
Subject:   RE: Denying password change
Message-ID:  <20010302144809.G3993@storm.psi-domain.co.uk>
In-Reply-To: <NDBBKOKIGKLFGGPFHCGBMELGCKAA.andy@tecc.co.uk>; from andy@tecc.co.uk on Fri, Mar 02, 2001 at 14:50:34 %2B0000
References:  <20010302143612.E3993@storm.psi-domain.co.uk> <NDBBKOKIGKLFGGPFHCGBMELGCKAA.andy@tecc.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
Ok...


rafiu# ls -l /usr/bin/passwd
-r-sr-xr-x  2 root  wheel  26564 Mar  2 11:44 /usr/bin/passwd

rafiu# chmod 700 /usr/bin/passwd
chmod: /usr/bin/passwd: Operation not permitted
 
Noticably owner bit is not set writeable, but a chmod u+w /usr/bin/passwd
will
also give "Operation not permitted".

??

Maybe Im being thick as usual... :)

Thanks, 

Jamie





On 2001.03.02 14:50 Andy [TECC NOPS] wrote:
> do an "ls -l /usr/bin/passwd" and see
> what's there, then try
> 
> rafiu# chmod 700 /usr/bin/passwd
> 
> what does that do?
> 
> > -----Original Message-----
> > From: owner-freebsd-isp@FreeBSD.ORG
> > [mailto:owner-freebsd-isp@FreeBSD.ORG]On Behalf Of Jamie Heckford
> > Sent: 02 March 2001 14:36
> > To: so@server.i-clue.de
> > Cc: freebsd-isp@freebsd.org
> > Subject: Re: Denying password change
> >
> >
> > Done that, but FreeBSD pops up the following message:
> >
> > rafiu# chmod go-x /usr/bin/passwd
> > chmod: /usr/bin/passwd: Operation not permitted
> >
> > (Yes I am running as root!)
> >
> > Heres my system info:
> >
> > FreeBSD 4.2-STABLE #2: Fri Mar  2 14:32:31 GMT 2001
> > root@:/usr/src/sys/compile/RAFIU
> >
> > Any ideas?!
> >
> > Thanks,
> >
> > Jamie
> >
> > On 2001.03.02 13:58 Christoph Sold wrote:
> > >
> > >
> > > Jamie Heckford schrieb:
> > > >
> > > > Is there anyway that I can prevent users with a shell account
> changing
> > > > their passwords??
> > > >
> > > > The reason being is that I know that if they are allowed to change
> > > their
> > > > passwords insecure one will be chosen, like their name or something
> > > > and I would like to assign them "secure" passwords that they cannot
> > > > change.
> > > >
> > > > Any help appreciated.
> > >
> > > chmod go-x /usr/bin/passwd
> > >
> > > Now you _have_ to be root to change passwords. Be warend, there are
> > > other tools which may change passwords, too.
> > >
> > > HTH
> > > -Christoph Sold
> > >
> > >
> >
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-isp" in the body of the message
> >
> 
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010302144809.G3993>