Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 02 Mar 2001 16:03:50 +0100
From:      Christoph Sold <so@server.i-clue.de>
To:        heckfordj@psi-domain.co.uk
Cc:        so@server.ms-agentur.de, freebsd-isp@FreeBSD.ORG
Subject:   Re: Denying password change
Message-ID:  <3A9FB656.F75499A0@i-clue.de>
References:  <20010302133522.A3993@storm.psi-domain.co.uk> <3A9FA71A.D7B59AF6@i-clue.de> <20010302143612.E3993@storm.psi-domain.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help


Jamie Heckford schrieb:
> 
> Done that, but FreeBSD pops up the following message:
> 
> rafiu# chmod go-x /usr/bin/passwd
> chmod: /usr/bin/passwd: Operation not permitted
> 
> (Yes I am running as root!)
> 
> Heres my system info:
> 
> FreeBSD 4.2-STABLE #2: Fri Mar  2 14:32:31 GMT 2001
> root@:/usr/src/sys/compile/RAFIU
> 
> Any ideas?!

so@amnesix:/usr/local/www/vpv/www.vpv.de/cgi-bin$ ls -lo /usr/bin/passwd
-r-sr-xr-x  2 root  wheel  schg 26532 Feb 13 17:41 /usr/bin/passwd

# chflags schg /usr/sbin/passwd
# chmod go-x /usr/sbin/passwd
# chflags noschg /usr/sbin/passwd

> 
> On 2001.03.02 13:58 Christoph Sold wrote:
> >
> >
> > Jamie Heckford schrieb:
> > >
> > > Is there anyway that I can prevent users with a shell account changing
> > > their passwords??
> > >
> > > The reason being is that I know that if they are allowed to change
> > their
> > > passwords insecure one will be chosen, like their name or something
> > > and I would like to assign them "secure" passwords that they cannot
> > > change.
> > >
> > > Any help appreciated.
> >
> > chmod go-x /usr/bin/passwd
> >
> > Now you _have_ to be root to change passwords. Be warend, there are
> > other tools which may change passwords, too.
> >
> > HTH
> > -Christoph Sold
> >
> >
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message

-- 
Freundliche Grüße aus Waiblingen

Christoph Sold
--
Systemadministrator, i-clue GmbH, Endersbacher Str. 57, 71334 Waiblingen
Fon: (0 71 51) 9 59 01-12, Fax: (0 71 51) 9 59 01-55, Mail: so@i-clue.de

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A9FB656.F75499A0>