Date: Wed, 15 Nov 2000 17:15:24 -0500 From: "Rossen Raykov" <rraykov@sageian.com> To: <kris@FreeBSD.ORG> Cc: <security@FreeBSD.ORG> Subject: Shell acces with not specified shell in /etc/shells (Re: problem using sysinstall) Message-ID: <010701c04f51$8d2659e0$4c00000a@sage> References: <bulk.92485.20001115010132@hub.freebsd.org> <003f01c04f3e$3c77e170$4c00000a@sage> <20001115125148.A21232@citusc17.usc.edu> <20001115131226.A21677@citusc17.usc.edu> <00d301c04f4d$e9802760$4c00000a@sage> <20001115135331.A22524@citusc17.usc.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Initially the /etc/shells file contains an empty line (between the comments and the first shell). I tough that this is the reason why login is granted on a person without shell in /etc/passwd. But I ware wrong! I removed this line from /etc/shells and even after that I was able to gain root command prompt after a valid password. The shell is /bin/sh Don't this violate the idea of /etc/shells? Regards, Rossen ----- Original Message ----- From: <kris@FreeBSD.ORG> To: <rraykov@sageian.com> Cc: <kris@FreeBSD.ORG>; <security@FreeBSD.ORG> Sent: Wednesday, November 15, 2000 4:53 PM Subject: Re: problem using sysinstall To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?010701c04f51$8d2659e0$4c00000a>