Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 02 Nov 1999 11:01:21 +0200
From:      Sheldon Hearn <sheldonh@uunet.co.za>
To:        John <papalia@UDel.Edu>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: /nonexistent vs. /sbin/nologin 
Message-ID:  <3824.941533281@axl.noc.iafrica.com>
In-Reply-To: Your message of "Mon, 01 Nov 1999 23:45:13 EST." <4.1.19991101232918.00943730@mail.udel.edu> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Mon, 01 Nov 1999 23:45:13 EST, John wrote:

> When i went into vipw though, I noticed that both "/nonexistent" and
> "/sbin/nologin" exist.  What is the difference between those? And
> also, which is considered more secure?

There's no difference in terms of security. The /sbin/nologin method
prints out a friendly "piss off" message, while /nonexistent does not.
However, /nonexistent will work on most non-FreeBSD platforms, which
makes supposedly makes migrating passwd files easier.

Personally, I think that's a pretty lame motivation. While it's mostly
religious, your end-users will certainly appreciate /sbin/nologin more.

Ciao,
Sheldon.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3824.941533281>