From owner-freebsd-isp  Fri Mar  2  6:38:18 2001
Delivered-To: freebsd-isp@freebsd.org
Received: from marvin.trident-uk.co.uk (mail.trident-uk.co.uk [195.166.16.10])
	by hub.freebsd.org (Postfix) with ESMTP id D9B0A37B71A
	for <freebsd-isp@freebsd.org>; Fri,  2 Mar 2001 06:38:14 -0800 (PST)
	(envelope-from heckfordj@psi-domain.co.uk)
Received: from smtp.trident-uk.co.uk (psi-gateway.psi-domain.co.uk [194.207.93.63])
	by marvin.trident-uk.co.uk (8.11.1/8.11.1) with SMTP id f22EahG24366;
	Fri, 2 Mar 2001 14:36:48 GMT
Date: Fri, 2 Mar 2001 14:36:12 +0000
From: Jamie Heckford <heckfordj@psi-domain.co.uk>
To: so@server.i-clue.de
Cc: freebsd-isp@freebsd.org
Subject: Re: Denying password change
Message-ID: <20010302143612.E3993@storm.psi-domain.co.uk>
Reply-To: heckfordj@psi-domain.co.uk
References: <20010302133522.A3993@storm.psi-domain.co.uk> <3A9FA71A.D7B59AF6@i-clue.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
In-Reply-To: <3A9FA71A.D7B59AF6@i-clue.de>; from so@server.i-clue.de on Fri, Mar 02, 2001 at 13:58:50 +0000
X-Mailer: Balsa 1.1.1
Lines: 43
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Done that, but FreeBSD pops up the following message:

rafiu# chmod go-x /usr/bin/passwd
chmod: /usr/bin/passwd: Operation not permitted

(Yes I am running as root!)

Heres my system info:

FreeBSD 4.2-STABLE #2: Fri Mar  2 14:32:31 GMT 2001    
root@:/usr/src/sys/compile/RAFIU

Any ideas?!

Thanks,

Jamie

On 2001.03.02 13:58 Christoph Sold wrote:
> 
> 
> Jamie Heckford schrieb:
> > 
> > Is there anyway that I can prevent users with a shell account changing
> > their passwords??
> > 
> > The reason being is that I know that if they are allowed to change
> their
> > passwords insecure one will be chosen, like their name or something
> > and I would like to assign them "secure" passwords that they cannot
> > change.
> > 
> > Any help appreciated.
> 
> chmod go-x /usr/bin/passwd
> 
> Now you _have_ to be root to change passwords. Be warend, there are
> other tools which may change passwords, too.
> 
> HTH
> -Christoph Sold
> 
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message