Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 6 Jun 2003 15:20:28 +0200
From:      "Peut Kotze" <PK@nanoteq.com>
To:        "Mark Redding" <mwj_gb@yahoo.com>, <freebsd-questions@freebsd.org>
Subject:   RE: passwd
Message-ID:  <5AC9A01A8B1175418B4DF7F45DD94D5F1E8A3A@srvexch1.nanoteq.co.za>

next in thread | raw e-mail | index | archive | help
Here is a list of libraries and files accessed by passwd from ktrace:

Exec:
/sbin/passwd
/bin/passwd
/usr/sbin/passwd

Libraries:
/usr/libexec/ld-elf.so.1
/usr/lib/libcrypt.so.2
/usr/lib/librpcsvc.so.2
/usr/lib/libutil.so.3
/usr/lib/libc.so.4

Files:
/etc/malloc.conf
/etc/spwd.db
/etc/login.conf
/etc/login.conf.db
/etc/auth.conf
/etc/master.passwd
/etc/localtime

Devices:
/dev/tty
/dev/urandom

Enjoy...
Peut

-----Original Message-----
From: Mark Redding [mailto:mwj_gb@yahoo.com]
Sent: 06 June 2003 02:53
To: freebsd-questions@freebsd.org
Subject: Re: passwd



#snip#

passwd needs to run setuid root, so it can write the
new password to
/etc/master.passwd:

[homer: danielby: ~]$ ls -l `which passwd`
-r-sr-xr-x  2 root  wheel  32824 19 May 11:04
/usr/bin/passwd*

You need to re-enable the setuid bit.

#end-snip#

That's not it I'm afraid. The setuid bit was set
anyway, and anyway, users who are members of the wheel
group can execute the passwd command without trouble
(I've only switched off 'other' access).

:-(



=3D=3D=3D=3D=3D
Mark W J Redding

__________________________________________________
Yahoo! Plus - For a better Internet experience
http://uk.promotions.yahoo.com/yplus/yoffer.html
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5AC9A01A8B1175418B4DF7F45DD94D5F1E8A3A>