Skip site navigation (1)Skip section navigation (2)
Date:      24 May 1998 00:13:35 -0000
From:      are.bryne@communique.no
To:        FreeBSD-gnats-submit@FreeBSD.ORG
Subject:   conf/6739: Proposing a change to default '/nonexistent' passwd shell entry
Message-ID:  <19980524001335.5379.qmail@david.communique.no>

next in thread | raw e-mail | index | archive | help

>Number:         6739
>Category:       conf
>Synopsis:       Proposing a change to default '/nonexistent' passwd shell entry
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Sun May 24 07:20:00 PDT 1998
>Last-Modified:
>Originator:     Are Bryne
>Organization:
Communique DA
>Release:        FreeBSD 2.2.6-STABLE i386
>Environment:

	FreeBSD 2.2-STABLE

>Description:

In an e-mail message Mike Smith <mike@smith.net.au> writes:
> It would (perhaps) be worthwhile adding some verbiage to the 
> description of the shell field to make it clearer that setting it to 
> refer to /sbin/nologin is the preferred technique for preventing a user 
> having any access to the system.  The current text assumes that the 
> reader already possesses this knowledge.

I ask him:
> Then perhaps the default /nonexistent 'shell' for various password file
> entries should be changed also?

The response is:
> It would probably make sense to have /sbin/nologin the default shell
> for those accounts, yes.

>How-To-Repeat:


>Fix:
	
Change all the /nonexistent entries in master.passwd to /sbin/nologin.
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980524001335.5379.qmail>