From owner-freebsd-arch@FreeBSD.ORG Tue Aug 2 00:52:14 2005 Return-Path: X-Original-To: freebsd-arch@freebsd.org Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3B43916A41F; Tue, 2 Aug 2005 00:52:14 +0000 (GMT) (envelope-from dougb@freebsd.org) Received: from rwcrmhc11.comcast.net (rwcrmhc11.comcast.net [216.148.227.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 008FD43D45; Tue, 2 Aug 2005 00:52:13 +0000 (GMT) (envelope-from dougb@freebsd.org) Received: from [192.168.0.3] (c-24-130-110-32.hsd1.ca.comcast.net[24.130.110.32]) by comcast.net (rwcrmhc11) with ESMTP id <2005080200521001300hna9ce>; Tue, 2 Aug 2005 00:52:10 +0000 Message-ID: <42EEC3B9.1090507@FreeBSD.org> Date: Mon, 01 Aug 2005 17:52:09 -0700 From: Doug Barton Organization: http://www.FreeBSD.org/ User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: "Arno J. Klaassen" References: <53d4293a37f280317d52338c2fc6fc6d@FreeBSD.org> <20050612025402.GD67746@dragon.NUXI.org> <200506151655.52894.jhb@FreeBSD.org> <20050616010629.GA3554@hub.freebsd.org> In-Reply-To: X-Enigmail-Version: 0.92.0.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-arch@freebsd.org Subject: Re: Death to toor X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Aug 2005 00:52:14 -0000 Arno J. Klaassen wrote: > Hello, > > [ stuff deleted ] > >>>>>Is there any good reason to keep the toor account around nowadays? >>>> >>>>Yes. Some of us use it. > > > from a user point of view, I use toor on all machines, basically for > two reasons : > > - I don't feel confident to change default root shell As long as you change it to another shell that is provided by the system (in this case /bin/sh) you'll be fine here. I've done this for years. My .profile tests to see if bash is available, and execs it if so. Note, I'm not saying that we should get rid of toor, quite the opposite, I think we should keep it. > - quite a lot of my customors "need/want" root access (including the > possibility to change it's passwd); keeping a toor account with a well > kept secret by me passwd saves me a lot of trouble (a part from > systems needing root passwd for catastrophic single user boot) That's an entirely different situation. hth, Doug