Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 08 Oct 1999 15:08:11 +0000
From:      William McVey <wam@sa.fedex.com>
To:        Lauri Laupmaa <mauri@aripaev.ee>
Cc:        "'security@freebsd.org'" <security@FreeBSD.ORG>
Subject:   Re: guest user 
Message-ID:  <199910082013.PAA15012@s07.sa.fedex.com>
In-Reply-To: Message id <E79588BBED6DD311B4560050042F21F701E324@lant.mbp.ee> 

next in thread | previous in thread | raw e-mail | index | archive | help
Lauri Laupmaa wrote:
>Hi
>how can I restrict user from changing his/her password ?

Easist way is to simply disable the 'passwd' command from the guest
user.  Assuming you can't disable the passwd command for everyone
on the box, you could put the 'guest' user into a group all of their
own (eg group 'guest'), and set the modes of the passwd command 
to be mode 4705 owned by root and grouped to group 'guest.'  This 
way regular users can change their password (via the world execute
bits) but the users of the guest group can't.

 -- William


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199910082013.PAA15012>