Re: [d-security] Re: /etc/passwd-shell

2002-01-12 Thread \Ivan R.\
En réponse à Christian Hammers [EMAIL PROTECTED]: Apart from the ftp users which (sometimes) need their ftp password to be stored in /etc/shadow and thus would making it a valid login password to, I can see no reason why not giving a user, that has *no* password, a shell. ok, but we can

Re: [d-security] Re: /etc/passwd-shell

2002-01-12 Thread \Ivan R.\
En réponse à Christian Hammers [EMAIL PROTECTED]: Apart from the ftp users which (sometimes) need their ftp password to be stored in /etc/shadow and thus would making it a valid login password to, I can see no reason why not giving a user, that has *no* password, a shell. ok, but we can

Re: [d-security] Re: /etc/passwd-shell

2002-01-11 Thread Christian Hammers
On Fri, Jan 11, 2002 at 10:00:32PM -0500, Hubert Chan wrote: So daemon, bin, sys, ftp, www-data, mail, mysql, etc. can probably be set to /bin/false. (Why does Debian not do this by default?) Apart from the ftp users which (sometimes) need their ftp password to be stored in /etc/shadow and

Re: [d-security] Re: /etc/passwd-shell

2002-01-11 Thread Christian Hammers
On Fri, Jan 11, 2002 at 10:00:32PM -0500, Hubert Chan wrote: So daemon, bin, sys, ftp, www-data, mail, mysql, etc. can probably be set to /bin/false. (Why does Debian not do this by default?) Apart from the ftp users which (sometimes) need their ftp password to be stored in /etc/shadow and thus