daily run output & passwd diff

2001-11-10 Thread Alexander Leidinger
Hi, I think the CVS tag shouldn't be interpreted as an entry which contains a password. ---snip--- Backup passwd and group files: 1c1 < # $FreeBSD:(password):09:07 peter Exp $ --- > # $FreeBSD:(password):27:16 ache Exp $ 16a17 > www:(password):80:80::0:0:World Wide Web Owner:/nonexistent:/sbin/

Re: daily run output & passwd diff

2001-11-10 Thread Crist J. Clark
On Fri, Nov 09, 2001 at 02:55:55PM +0100, Alexander Leidinger wrote: > Hi, > > I think the CVS tag shouldn't be interpreted as an entry which contains > a password. > > ---snip--- > Backup passwd and group files: > > 1c1 > < # $FreeBSD:(password):09:07 peter Exp $ > --- > > # $FreeBSD:(password

Re: daily run output & passwd diff

2001-11-12 Thread John Baldwin
On 11-Nov-01 Crist J. Clark wrote: > On Fri, Nov 09, 2001 at 02:55:55PM +0100, Alexander Leidinger wrote: >> Hi, >> >> I think the CVS tag shouldn't be interpreted as an entry which contains >> a password. >> >> ---snip--- >> Backup passwd and group files: >> >> 1c1 >> < # $FreeBSD:(password):

Re: daily run output & passwd diff

2001-11-12 Thread Crist J. Clark
On Mon, Nov 12, 2001 at 08:08:37AM -0800, John Baldwin wrote: > > On 11-Nov-01 Crist J. Clark wrote: > > On Fri, Nov 09, 2001 at 02:55:55PM +0100, Alexander Leidinger wrote: > >> Hi, > >> > >> I think the CVS tag shouldn't be interpreted as an entry which contains > >> a password. > >> > >> ---

Re: daily run output & passwd diff

2001-11-12 Thread John Baldwin
On 13-Nov-01 Crist J. Clark wrote: >> What if someone comments out a line in the password file of a user? Then >> this >> won't hide that password. When this originally went in, it took a long >> while >> to get a sed line people were happy with. Replacing the version number is a >> minor thin

Re: daily run output & passwd diff

2001-11-13 Thread Crist J. Clark
On Mon, Nov 12, 2001 at 10:19:31PM -0800, John Baldwin wrote: > > On 13-Nov-01 Crist J. Clark wrote: > >> What if someone comments out a line in the password file of a user? Then > >> this > >> won't hide that password. When this originally went in, it took a long > >> while > >> to get a sed l

Re: daily run output & passwd diff

2001-11-13 Thread Robert Watson
On Mon, 12 Nov 2001, John Baldwin wrote: > > What if someone comments out a line in the password file of a user? > Then this won't hide that password. When this originally went in, it > took a long while to get a sed line people were happy with. Replacing > the version number is a minor thin

Re: daily run output & passwd diff

2001-11-13 Thread John Baldwin
On 13-Nov-01 Robert Watson wrote: > > On Mon, 12 Nov 2001, John Baldwin wrote: > >> >> What if someone comments out a line in the password file of a user? >> Then this won't hide that password. When this originally went in, it >> took a long while to get a sed line people were happy with. R

Re: daily run output & passwd diff

2001-11-13 Thread Robert Watson
On Tue, 13 Nov 2001, John Baldwin wrote: > > My temptation would actually be to ignore any commented lines in either > > file for the purposes of the diff. For the purposes of security checking, > > you care mostly about the uncommented lines. This would allow the script > > to exclude content

Re: daily run output & passwd diff

2001-11-13 Thread John Baldwin
On 13-Nov-01 Robert Watson wrote: > > On Tue, 13 Nov 2001, John Baldwin wrote: > >> > My temptation would actually be to ignore any commented lines in either >> > file for the purposes of the diff. For the purposes of security checking, >> > you care mostly about the uncommented lines. This w

Re: daily run output & passwd diff

2001-11-13 Thread Crist J. Clark
On Tue, Nov 13, 2001 at 02:31:48PM -0800, John Baldwin wrote: > > On 13-Nov-01 Robert Watson wrote: > > > > On Tue, 13 Nov 2001, John Baldwin wrote: > > > >> > My temptation would actually be to ignore any commented lines in either > >> > file for the purposes of the diff. For the purposes of

Re: daily run output & passwd diff

2001-11-13 Thread Giorgos Keramidas
On 2001-11-13 15:31:02, Crist J. Clark wrote: > > echo "$host passwd diffs:" > - diff $bak/master.passwd.bak /etc/master.passwd |\ > - sed 's/^\([<>] [^#][^:]*\):[^:]*:/\1:(password):/' > + diff -I '^#' $bak/master.passwd.bak /etc/m