From owner-freebsd-questions@FreeBSD.ORG Wed Dec 30 13:11:58 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C503B106566B for ; Wed, 30 Dec 2009 13:11:58 +0000 (UTC) (envelope-from erikt@midgard.homeip.net) Received: from ch-smtp01.sth.basefarm.net (ch-smtp01.sth.basefarm.net [80.76.149.212]) by mx1.freebsd.org (Postfix) with ESMTP id 8030A8FC18 for ; Wed, 30 Dec 2009 13:11:58 +0000 (UTC) Received: from c83-255-48-78.bredband.comhem.se ([83.255.48.78]:51027 helo=falcon.midgard.homeip.net) by ch-smtp01.sth.basefarm.net with esmtp (Exim 4.68) (envelope-from ) id 1NPyKb-0004Cc-49 for freebsd-questions@freebsd.org; Wed, 30 Dec 2009 14:11:19 +0100 Received: (qmail 23856 invoked from network); 30 Dec 2009 14:11:13 +0100 Received: from owl.midgard.homeip.net (10.1.5.7) by falcon.midgard.homeip.net with ESMTP; 30 Dec 2009 14:11:13 +0100 Received: (qmail 2175 invoked by uid 1001); 30 Dec 2009 14:11:13 +0100 Date: Wed, 30 Dec 2009 14:11:13 +0100 From: Erik Trulsson To: Anton Shterenlikht Message-ID: <20091230131112.GA2115@owl.midgard.homeip.net> References: <20091230123341.GC36440@mech-cluster241.men.bris.ac.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20091230123341.GC36440@mech-cluster241.men.bris.ac.uk> User-Agent: Mutt/1.5.20 (2009-06-14) X-Originating-IP: 83.255.48.78 X-Scan-Result: No virus found in message 1NPyKb-0004Cc-49. X-Scan-Signature: ch-smtp01.sth.basefarm.net 1NPyKb-0004Cc-49 892ebdbfa96e4beee86e901616a1e0f0 Cc: freebsd-questions@freebsd.org Subject: Re: does toor have passwd or not? According to logins -p: yes X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Dec 2009 13:11:58 -0000 On Wed, Dec 30, 2009 at 12:33:41PM +0000, Anton Shterenlikht wrote: > I was checking for passwordless accounts with 'logins -p'. > None was found. However, I understand toor doesn't have > passwd by default, and I never touched it, so I expected > logins -p to show toor, but it didn't. > > Just to check I also tried to su toor with root passwd - no access. > > Please can somebody clarify if toor does indeed have > passwd. toor, like many other system accounts, by default has its password entry set to '*' which indicates that password authenictation is disabled for that account. (See the passwd(5) manpage for details.) This means that unless you set a password for toor you cannot login as toor, so the mere presence of that account is not a security problem. -- Erik Trulsson ertr1013@student.uu.se