Re: securing pop3
Quoting vincenzo <vincenzo@dagods.org>:
> On Mon, 10 Feb 2003 16:26:03 -0500 (EST)
> Mike Dresser <mdresser_l@windsormachine.com> wrote:
>
> > That lets you in just fine unfortunately.
> >
> > mdresser:x:1000:1000:Mike Dresser,,,:/home/mdresser:
> >
> > x:~# login
> > x login: mdresser
> > Password:
> > Last login: Mon Feb 10 16:23:51 2003 on pts/1
> > Linux x 2.4.20 #1 SMP Sun Feb 2 22:20:23 EST 2003 i686 unknown
> > You have mail.
> > mdresser@x:~$
>
> How can it be possible ? Doesn't the system normally check at the shell
> field value in /etc/passwd to look for the shell to use ?
> Is it using a default shell in the case where no shell value is specified
> ?
>
quite right.
You'll want to put something like /bin/false in your passwd file as the user's
shell.
To change the default for new accounts you can edit /etc/adduser.conf
-ross
Reply to: