From owner-freebsd-security  Tue Feb 26 13:12:30 2002
Delivered-To: freebsd-security@freebsd.org
Received: from energyhq.homeip.net (213-97-200-73.uc.nombres.ttd.es [213.97.200.73])
	by hub.freebsd.org (Postfix) with ESMTP id C0F2E37B402
	for <security@freebsd.org>; Tue, 26 Feb 2002 13:12:27 -0800 (PST)
Received: by energyhq.homeip.net (Postfix, from userid 1001)
	id CBA2D3FC9D; Tue, 26 Feb 2002 22:12:28 +0100 (CET)
Date: Tue, 26 Feb 2002 22:12:28 +0100
From: Miguel Mendez <flynn@energyhq.homeip.net>
To: Bart Matthaei <bart@dreamflow.nl>
Cc: Guy Coste <gcoste@novell.com>, security@freebsd.org
Subject: Re: login problem
Message-ID: <20020226221228.A10897@energyhq.homeip.net>
Mail-Followup-To: Bart Matthaei <bart@dreamflow.nl>,
	Guy Coste <gcoste@novell.com>, security@freebsd.org
References: <sc7c0551.022@cpl-emea-mail1.cpl.novell.com> <20020226220434.E62131@heresy.dreamflow.nl>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="qDbXVdCdHGoSgWSk"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20020226220434.E62131@heresy.dreamflow.nl>; from bart@dreamflow.nl on Tue, Feb 26, 2002 at 10:04:34PM +0100
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--qDbXVdCdHGoSgWSk
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Feb 26, 2002 at 10:04:34PM +0100, Bart Matthaei wrote:
> On Tue, Feb 26, 2002 at 09:59:37PM +0100, Guy Coste wrote:
> > you may use 'toor' the root bash user
>=20
> Correct me if i'm wrong,
>=20
> but "toor" is password-less out of the box.


Hello? password-less as in 'please hack me?'

No, it's actually *disabled*. Check you /etc/master.passwd=20

toor:*:0:0::0:0:Bourne-again Superuser:/root:

Cheers,
--=20
        Miguel Mendez - flynn@energyhq.homeip.net
        GPG Public Key :: http://energyhq.homeip.net/files/pubkey.txt
        EnergyHQ :: http://www.energyhq.tk
        FreeBSD - The power to serve!

--qDbXVdCdHGoSgWSk
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8e/o7nLctrNyFFPERAvJEAKCbJFy+91ltVB2TEIA9VKk3ExBkOwCeOkrY
V7STDTqFmzu5ZywfyXRcO24=
=GjFU
-----END PGP SIGNATURE-----

--qDbXVdCdHGoSgWSk--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message