From owner-freebsd-questions  Wed Jan 20 08:45:06 1999
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id IAA19263
          for freebsd-questions-outgoing; Wed, 20 Jan 1999 08:45:06 -0800 (PST)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from guru.phone.net (guru.phone.net [209.157.82.120])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id IAA19255
          for <freebsd-questions@FreeBSD.ORG>; Wed, 20 Jan 1999 08:45:04 -0800 (PST)
          (envelope-from mwm@phone.net)
Received: (qmail 9005 invoked by uid 100); 20 Jan 1999 16:44:57 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 20 Jan 1999 16:44:57 -0000
Date: Wed, 20 Jan 1999 08:44:57 -0800 (PST)
From: Mike Meyer <mwm@phone.net>
To: freebsd-questions@FreeBSD.ORG
Subject: Re: howto prevent password from been changed?
In-Reply-To: <36A5D54D.234631CB@mx.cei.gov.cn>
Message-ID: <Pine.BSF.4.05.9901200827080.2948-100000@guru.phone.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Ok, to solve the problem as stated:

1) Move passwd to passswd.real.
2) Make "passwd" a shell script that checks to see if the userid is one of the
   ones you don't want changing the password, and then either prints a
   "Don't do this" message, or runs passwd.real.

On the other hand, given 7 accounts with such obvious passwords and
not wanting people to change them, you could probably just create a
single unpassworded "guest" account, and let everyone use that. It
wouldn't make much difference in the security of the system.

	<mike

On Wed, 20 Jan 1999, Peihan Wang wrote:

> Date: Wed, 20 Jan 1999 21:08:29 +0800
> From: Peihan Wang <peihanw@mx.cei.gov.cn>
> To: freebsd-questions@FreeBSD.ORG
> Subject: howto prevent password from been changed?
> 
> I have a 486/66 with FreeBSD 2.2.6 installed. It has 
> a 8 port serial card connects several old PCs running 
> terminal emulation program for DOS.
> 
> I added 8 new users named stud1 -- stud8. Their 
> passwords are same as their login names. Each user can 
> run c/c++ compiler, perl5, gdb and common commands.
> They all belong to group student.
> 
> But I do not want them to execute passwd for that will 
> cause extra sys-admin tasks.
> 
> The default permission of passwd is -r-sr-xr-x.
> Change permission or hide passwd is unwise for other 
> users will feel discomfort.
> 
> Any suggestions?
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message