From owner-freebsd-questions Wed Oct 24 19:22:53 2001 Delivered-To: freebsd-questions@freebsd.org Received: from smtp2.mbox.com.au (smtp2.mbox.com.au [203.103.80.178]) by hub.freebsd.org (Postfix) with ESMTP id 3EBF237B401 for ; Wed, 24 Oct 2001 19:22:51 -0700 (PDT) Received: from nms2.mbox.com.au (webmail.i7mail.com.au [192.168.20.4]) by smtp2.mbox.com.au (Sun Internet Mail Server sims.4.0.2000.05.17.04.13.p6) with ESMTP id <0GLQ00EZRP5T89@smtp2.mbox.com.au> for freebsd-questions@FreeBSD.ORG; Thu, 25 Oct 2001 10:20:17 +0800 (WST) Received: from mbox.com.au ([127.0.0.1]) by nms2.mbox.com.au (Netscape Messaging Server 4.15) with ESMTP id GLQP5T00.WNI for ; Thu, 25 Oct 2001 10:20:17 +0800 Date: Thu, 25 Oct 2001 12:20:16 +1000 From: BSD Freak Subject: Which way is better to deny shell access To: FreeBSD Questions Message-id: <18f1ed818ec2ec.18ec2ec18f1ed8@mbox.com.au> MIME-version: 1.0 X-Mailer: Netscape Webmail Content-type: text/plain; charset=us-ascii Content-language: en Content-disposition: inline Content-transfer-encoding: 7BIT X-Accept-Language: en Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi everyone, Just wondering.... we have a whole heap of pop3 users... we deny them shell access by assigning their shell as /sbin/nologin ( the same shell as many of the system accounts)... however I noticed if I use the adduser utility to create a user with no shell, it assigns /nonexistent as their shell...... Which is better? I feel that /nonexitent is probably best because it does not let them login at all via the shell however /sbin/nologin lets them login, reads them the motd and then logs them out automatically....... Am I right in assuming /nonexistent is a better choice? --------------------------------------------------------------------- mBox makes you work Smarter, not Harder, from only $0.58 per WEEK! Visit http://www.mbox.com.au To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message