From owner-freebsd-questions Wed Feb 24 21:34:36 1999 Delivered-To: freebsd-questions@freebsd.org Received: from pobox.com (mercury-2-154.mdm.mkt.execpc.com [169.207.86.219]) by hub.freebsd.org (Postfix) with ESMTP id 99A8314F57 for ; Wed, 24 Feb 1999 21:33:32 -0800 (PST) (envelope-from hamilton@pobox.com) Received: from pobox.com (localhost [127.0.0.1]) by pobox.com (Postfix) with ESMTP id E1D7346381; Wed, 24 Feb 1999 23:32:45 -0600 (CST) To: Jeroen Ruigrok/Asmodai Cc: Johnny Matthews , freebsd-questions@FreeBSD.ORG Subject: Re: your mail In-reply-to: Your message of "Wed, 24 Feb 1999 17:49:20 +0100." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 24 Feb 1999 23:32:45 -0600 From: Jon Hamilton Message-Id: <19990225053245.E1D7346381@pobox.com> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message , Jeroen Ruigrok/Asmodai wrote: } On 23-Feb-99 Johnny Matthews wrote: } > How can I restrict my users from changing their finger information? } } Only thing could be to chmod the .plan file to a user that they cannot su } to (if they can su at all). } } Because if the file remains chmod to their UID then they can chmod it back } to rwx------ themselves and thus edit it. Won't do any good unless the user doesn't own their own home directory. Regardless of the owner of the file, if the user can write to the directory which contains it, he can delete the file (and then recreate it with whatever contents he likes). I don't think that's the question that was asked anyway; it sounds more like the original poster wanted to know how to disable chfn. The answer is not as straightforward as it might seem; disabling /usr/bin/chfn will get you only part way there, because all the ch* binaries (chsh, chfn, chpass, ypch*) are really the same binary, and behave differently depending on argv[0]. If you remove /usr/bin/chfn but leave /usr/bin/chsh, the user can do this: $ cd /tmp $ ln -s /usr/bin/chsh chfn $ ./chfn and still change their finger info. -- Jon Hamilton hamilton@pobox.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message