[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Allow FTP in, but not shell login



On Tue, Mar 13, 2001 at 12:08:17PM -0800, Eric N. Valor wrote:
> 
> Try setting the shell to /bin/true (and make sure this is listed in
> /etc/shells). /bin/true returns a zero result and exits. It allows you
> to "log in" via daemons that require a valid shell, yet won't allow
> telnet-style access (no real shell, just a "true" result).
[snip]

/usr/bin/passwd can sometimes be usefull as shell... By the way, check
the bugtraq archives -- remote exploits for accounts with /bin/false as
shell have been seen on there.

Jörgen



Reply to: