From owner-freebsd-ports@freebsd.org Thu Aug 11 13:17:57 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 08C5CBB4982; Thu, 11 Aug 2016 13:17:57 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (mx3.absolight.net [IPv6:2a01:678:2:100::25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "plouf.absolight.net", Issuer "CAcert Class 3 Root" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id C6F771A2A; Thu, 11 Aug 2016 13:17:56 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id A6274BDC93; Thu, 11 Aug 2016 15:17:54 +0200 (CEST) Received: from gw.in.absolight.net (gw-ecl.in.absolight.net [79.143.241.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gw.in.absolight.net", Issuer "CA Cert Signing Authority" (not verified)) by prod2.absolight.net (Postfix) with ESMTPSA id 7A2A2BDC7F; Thu, 11 Aug 2016 15:17:54 +0200 (CEST) Received: from ogg.in.absolight.net (ogg.in.absolight.net [79.143.241.239]) by gw.in.absolight.net (Postfix) with ESMTP id 3CFB26145; Thu, 11 Aug 2016 15:17:53 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by ogg.in.absolight.net (Postfix) with ESMTP id 54AD02DA3513; Thu, 11 Aug 2016 15:17:52 +0200 (CEST) Date: Thu, 11 Aug 2016 15:17:51 +0200 From: Mathieu Arnold To: "O. Hartmann" , freebsd-current , freebsd-ports Subject: Re: Passwordless accounts vi ports! Message-ID: <9567532A811EA9735990943A@ogg.in.absolight.net> In-Reply-To: <660CDD44B902B2A0C050ACDD@atuin.in.mat.cc> References: <20160811070505.2c1a1466@freyja.zeit4.iv.bundesimmobilien.de> <660CDD44B902B2A0C050ACDD@atuin.in.mat.cc> X-Mailer: Mulberry/4.0.8 (Mac OS X) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="==========87B141FE2C7FC6DD5925==========" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 13:17:57 -0000 --==========87B141FE2C7FC6DD5925========== Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline +--On 11 ao=C3=BBt 2016 11:26:58 +0200 Mathieu Arnold = wrote: |=20 |=20 | +--On 11 ao=C3=BBt 2016 07:05:05 +0200 "O. Hartmann" | wrote: || I just checked the security scanning outputs of FreeBSD and found this || surprising result: ||=20 || [...] || Checking for passwordless accounts: || polkitd::565:565::0:0:Polkit Daemon User:/var/empty:/usr/sbin/nologin || pulse::563:563::0:0:PulseAudio System = User:/nonexistent:/usr/sbin/nologin || saned::194:194::0:0:SANE Scanner Daemon:/nonexistent:/bin/sh || clamav::106:106::0:0:Clamav Antivirus:/nonexistent:/usr/sbin/nologin || bacula::910:910::0:0:Bacula Daemon:/var/db/bacula:/usr/sbin/nologin || [...] ||=20 || Obviously, some ports install accounts but do not secure them as there = is || an empty password. ||=20 || I consider this not a feature, but a bug. |=20 | Mmmm, I rewrote the user/group creation thingie a few months back, a bug | may have crept in, I'll have a look at it today. I've tested things on 9, 10 and 11, I can't reproduce that. --=20 Mathieu Arnold --==========87B141FE2C7FC6DD5925========== Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJXrHr/XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzQUI2OTc4OUQyRUQxMjEwNjQ0MEJBNUIz QTQ1MTZGMzUxODNDRTQ4AAoJEDpFFvNRg85IWqUP/RAqCSehseLB5WjTiyMu0TMe l1QJXn5KZDEgvZacLPV3wjDF/N7uFMT5ntNPY9z4/8keJRV7s4RJdEmGDc5IdHkY AVmOHW61V1yIdbFJobHaH0GEKOIAuYnMjxG5WvJ0ILw5d8bzkZ95c9z2jJ+Kq0B0 ku60M0j85ZrgZ2NA81iXK0B2XOZYBMeYMkQthY68xXGdnbelGZ1dc6pkz2q65RtU +V/aDZZS8pumazulwiTF2oWCFVJvakEU0uy2qobpJb1gr8aH7/j48ryfUd+onJJY dZSnvyXH8+I4dRKfE28rzb22HHtphmRT4rJEx+H2d6EJpkodw3AmMfQKE5wuktyS iXI8CSJXi8bi9KNF3XOSB0VWzhdanrtAMvGjm5MojWyqxq8DoeulXP8oQIoEkgkR Pn8S6iIZvayX28OPHG7dHct/0oFeDL3m+ymbRGw4voG4FJZ+Fff6p6bLKlnJzy/t 7GmRxUqOuac77x0dS+YVv4RNOE/53Dre1q+1/LvzKaUtyR5rL9beDN2g+zbgPatn QGVOhW08aIHYHPwne6CCSwfHJtNVRN5BLU+NOY9bXVKACs6OHR68zJdif6beCwSu eHRHmDdyx+l/m1E7+/tMRxjoABOyv/ORgfrs9WBUnFdbXX3guKdOlVtQXxBGlJat 97pxVCO3wx1+nyElkdNg =evw4 -----END PGP SIGNATURE----- --==========87B141FE2C7FC6DD5925==========--