Mailinglist Archive: opensuse-factory (600 mails)
| < Previous | Next > |
Re: [opensuse-factory] "su nobody" fails?
- From: Joerg.Schilling@xxxxxxxxxxxxxxxxxxx (Joerg Schilling)
- Date: Thu, 08 Oct 2009 13:03:43 +0200
- Message-id: <4acdc70f.nlkTEAnZxymePcWE%Joerg.Schilling@xxxxxxxxxxxxxxxxxxx>
Anders Johansson <ajohansson@xxxxxxx> wrote:
BTW: does the group(1) command on Suse still allow to become a group if the
file /etc/group has an empty passwd field for the related group? This would be
a security risk as the traditinal UNIX behavior is to disallow group(1) for
groups with wmpty passwd fields.
Jörg
--
EMail:joerg@xxxxxxxxxxxxxxxxxxxxxxxxxxx (home) Jörg Schilling D-13353 Berlin
js@xxxxxxxxxxxxxxx (uni)
joerg.schilling@xxxxxxxxxxxxxxxxxxx (work) Blog:
http://schily.blogspot.com/
URL: http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
On Thursday 08 October 2009 11:46:14 Bjoern Voigt wrote:
3) mybox:~ # grep nobody /etc/passwd /etc/shadow
/etc/passwd:nobody:x:65534:65533:nobody:/var/lib/nobody:/bin/bash
/etc/shadow:nobody:!!:8902:0:10000::::
There is the problem, those !! things there. That should be * instead of !!
BTW: does the group(1) command on Suse still allow to become a group if the
file /etc/group has an empty passwd field for the related group? This would be
a security risk as the traditinal UNIX behavior is to disallow group(1) for
groups with wmpty passwd fields.
Jörg
--
EMail:joerg@xxxxxxxxxxxxxxxxxxxxxxxxxxx (home) Jörg Schilling D-13353 Berlin
js@xxxxxxxxxxxxxxx (uni)
joerg.schilling@xxxxxxxxxxxxxxxxxxx (work) Blog:
http://schily.blogspot.com/
URL: http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
| < Previous | Next > |