Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 May 2023 21:52:37 -0500
From:      Mike Karels <mike@karels.net>
To:        bob prohaska <fbsd@www.zefox.net>
Cc:        freebsd-current@freebsd.org
Subject:   Re: Surprise null root password
Message-ID:  <E29BDD31-BB38-41F8-B1F9-422CBEC7143D@karels.net>
In-Reply-To: <ZHFqzf9A90L9NfJb@www.zefox.net>
References:  <ZHDt21wFlpJfQKEs@www.zefox.net> <ZHFqzf9A90L9NfJb@www.zefox.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 26 May 2023, at 21:28, bob prohaska wrote:

> It turns out all seven hosts in my cluster report
> a null password for root in /usr/src/etc/master.passwd:
> root::0:0::0:0:Charlie &:/root:/bin/sh
>
> Is that intentional?

Well, it has been that way in FreeBSD since 1993, and in BSD since
1980 (4.0BSD).  I guess you would say that it is intentional.  The
alternative would be to have a well-known password like root, but
then it wouldn’t be as obvious that a local password had not been
set.

		Mike

> Thanks for reading,
>
> bob prohaska



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E29BDD31-BB38-41F8-B1F9-422CBEC7143D>