13 Mar
2009
13 Mar
'09
19:49
On Fri, Mar 13, 2009 at 10:19:32AM -0500, L. V. Lammert wrote:
On Fri, 13 Mar 2009, [UTF-8] Cristian Rodríguez wrote:
L. V. Lammert escribió:
Wow - thanks for pointing that out! Seems like somebody slipped up ROYALLY on this one - it was login enabled yet!
No.
Perhaps not functionally, but there **IS** a valid shell in passwd - that makes a login possible. IMHO, best security practices dictate that accounts without login capability should have nologin as a shell.
You might not use this account either. Not sure if the browser starts if you have /bin/false as shell. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org