From owner-freebsd-questions@FreeBSD.ORG Thu Feb 14 14:16:08 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 40F1516A418 for ; Thu, 14 Feb 2008 14:16:08 +0000 (UTC) (envelope-from xfb52@dial.pipex.com) Received: from mk-outboundfilter-1.mail.uk.tiscali.com (mk-outboundfilter-1.mail.uk.tiscali.com [212.74.114.37]) by mx1.freebsd.org (Postfix) with ESMTP id CF88813C478 for ; Thu, 14 Feb 2008 14:16:07 +0000 (UTC) (envelope-from xfb52@dial.pipex.com) X-Trace: 40798132/mk-outboundfilter-1.mail.uk.tiscali.com/PIPEX/$MX-ACCEPTED/pipex-infrastructure/62.241.162.32 X-SBRS: None X-RemoteIP: 62.241.162.32 X-IP-MAIL-FROM: xfb52@dial.pipex.com X-IP-BHB: Once X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ao8CAHfbs0c+8aIg/2dsb2JhbACSFJ0F X-IP-Direction: IN Received: from ranger.systems.pipex.net ([62.241.162.32]) by smtp.pipex.tiscali.co.uk with ESMTP; 14 Feb 2008 14:16:06 +0000 Received: from [192.168.23.2] (62-31-10-181.cable.ubr05.edin.blueyonder.co.uk [62.31.10.181]) by ranger.systems.pipex.net (Postfix) with ESMTP id 16E4BE00008C; Thu, 14 Feb 2008 14:16:05 +0000 (GMT) Message-ID: <47B44D25.10804@dial.pipex.com> Date: Thu, 14 Feb 2008 14:16:05 +0000 From: Alex Zbyslaw User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-GB; rv:1.7.13) Gecko/20061205 X-Accept-Language: en MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <6.0.0.22.2.20080212190133.024c3008@mail.computinginnovations.com> <6.0.0.22.2.20080213125757.02532c58@mail.computinginnovations.com> In-Reply-To: <6.0.0.22.2.20080213125757.02532c58@mail.computinginnovations.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Help with su on 6.3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Feb 2008 14:16:08 -0000 Derek Ragona wrote: > I usually just set the shell to /usr/bin/false or /usr/sbin/nologin > for users like these. Of course you can't test these interactively > with su. If you want to do that, give the account a valid login > shell, test it, then set it to false or nologin. > It's not clear to me what you mean by "you can't test these interactively with su". If you mean you can't su to them and get a shell; that's wrong. su -m account_with_fake_shell --Alex