[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: noboby with a shell !!



Does the user nobody has got a password in /etc/shadow ?

greets
  Robbert

Citeren Yoann <debian-yoann@ifrance.com>:

> hi,
> 
> I look at in the file /etc/passwd on my server today, and I saw the user 
> nobody has a shell !!. When I installed my debian (sarge, I know it's 
> bad, but it's just a server for me...) I put /bin/false. A few days ago, 
> while an upgrade, apt asked to me to upgrade that file to the new 
> version and answer yes, so I think it come from that action, but it 
> could be unsecure to put /bin/sh for nobody ?
> 
> nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
>                                           ^^^^^^^^
> I change to :
> 
> nobody:x:65534:65534:nobody:/dev/null:/bin/false
> 
> Yoann
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
> 
> 
> 





__________________________________________________________


http://www.wanadoo.nl/



Reply to: