Re: Why do system users have valid shells

["Joe Moore" <joemoore@iegrec.org>]

Russell Coker said:
> On Thu, 23 Oct 2003 04:02, Joe Moore wrote:
>> I guess what I'm saying is that there are just as many ways to get
>> access to UID2 with "bin:x:2:2:bin:/bin:/bin/false" in the
>> /etc/passwd.  As there are with "bin:x:2:2:bin:/bin:/bin/sh".

(And bin:*: in /etc/shadow.  I left that out, but it was apparently assumed.)

>
> Name some examples.

0=0, in the case of non-buggy authentication code.

0=0, in the case of all known bugs in current code.

Who knows about the other cases?

--Joe