From owner-freebsd-security Fri Oct 8 13:14: 7 1999 Delivered-To: freebsd-security@freebsd.org Received: from mx5.sac.fedex.com (mx5.sac.fedex.com [199.81.194.37]) by hub.freebsd.org (Postfix) with ESMTP id 48C5714D6A for ; Fri, 8 Oct 1999 13:13:59 -0700 (PDT) (envelope-from wam@mohawk.dpd.fedex.com) Received: from mx6.sac.fedex.com (mx6.sac.fedex.com [199.82.159.10]) by mx5.sac.fedex.com (8.9.3/8.9.3) with ESMTP id PAA39206 for ; Fri, 8 Oct 1999 15:13:58 -0500 (CDT) (envelope-from wam@mohawk.dpd.fedex.com) Received: from s07.sa.fedex.com (root@s07.sa.fedex.com [199.81.124.17]) by mx6.sac.fedex.com (8.9.3/8.9.3) with ESMTP id PAA74160 for ; Fri, 8 Oct 1999 15:13:58 -0500 (CDT) (envelope-from wam@mohawk.dpd.fedex.com) Received: from mohawk.dpd.fedex.com (mohawk.dpd.fedex.com [199.81.74.121]) by s07.sa.fedex.com (8.9.1/8.9.1) with ESMTP id PAA15012; Fri, 8 Oct 1999 15:13:52 -0500 (CDT) Message-Id: <199910082013.PAA15012@s07.sa.fedex.com> To: Lauri Laupmaa Cc: "'security@freebsd.org'" Subject: Re: guest user In-reply-to: Message id Date: Fri, 08 Oct 1999 15:08:11 +0000 From: William McVey Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Lauri Laupmaa wrote: >Hi >how can I restrict user from changing his/her password ? Easist way is to simply disable the 'passwd' command from the guest user. Assuming you can't disable the passwd command for everyone on the box, you could put the 'guest' user into a group all of their own (eg group 'guest'), and set the modes of the passwd command to be mode 4705 owned by root and grouped to group 'guest.' This way regular users can change their password (via the world execute bits) but the users of the guest group can't. -- William To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message