Mailinglist Archive: opensuse-factory (600 mails)

< Previous Next >
Re: [opensuse-factory] "su nobody" fails?
  • From: Joerg.Schilling@xxxxxxxxxxxxxxxxxxx (Joerg Schilling)
  • Date: Thu, 08 Oct 2009 13:03:43 +0200
  • Message-id: <4acdc70f.nlkTEAnZxymePcWE%Joerg.Schilling@xxxxxxxxxxxxxxxxxxx>
Anders Johansson <ajohansson@xxxxxxx> wrote:

On Thursday 08 October 2009 11:46:14 Bjoern Voigt wrote:
3) mybox:~ # grep nobody /etc/passwd /etc/shadow
/etc/passwd:nobody:x:65534:65533:nobody:/var/lib/nobody:/bin/bash
/etc/shadow:nobody:!!:8902:0:10000::::

There is the problem, those !! things there. That should be * instead of !!

BTW: does the group(1) command on Suse still allow to become a group if the
file /etc/group has an empty passwd field for the related group? This would be
a security risk as the traditinal UNIX behavior is to disallow group(1) for
groups with wmpty passwd fields.

Jörg

--
EMail:joerg@xxxxxxxxxxxxxxxxxxxxxxxxxxx (home) Jörg Schilling D-13353 Berlin
js@xxxxxxxxxxxxxxx (uni)
joerg.schilling@xxxxxxxxxxxxxxxxxxx (work) Blog:
http://schily.blogspot.com/
URL: http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups