From owner-freebsd-questions@FreeBSD.ORG Fri Nov 9 17:18:03 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8E9E216A421; Fri, 9 Nov 2007 17:18:03 +0000 (UTC) (envelope-from keramida@ceid.upatras.gr) Received: from igloo.linux.gr (igloo.linux.gr [62.1.205.36]) by mx1.freebsd.org (Postfix) with ESMTP id DF7C313C48A; Fri, 9 Nov 2007 17:18:02 +0000 (UTC) (envelope-from keramida@ceid.upatras.gr) Received: from kobe.laptop (vader.bytemobile-rio.ondsl.gr [83.235.57.37]) (authenticated bits=128) by igloo.linux.gr (8.14.1/8.14.1/Debian-9) with ESMTP id lA9HHNnH026666 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Fri, 9 Nov 2007 19:17:31 +0200 Received: from kobe.laptop (kobe.laptop [127.0.0.1]) by kobe.laptop (8.14.1/8.14.1) with ESMTP id lA9HHIDE016061; Fri, 9 Nov 2007 19:17:18 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Received: (from keramida@localhost) by kobe.laptop (8.14.1/8.14.1/Submit) id lA9HHHXr016059; Fri, 9 Nov 2007 19:17:17 +0200 (EET) (envelope-from keramida@ceid.upatras.gr) Date: Fri, 9 Nov 2007 19:17:16 +0200 From: Giorgos Keramidas To: Alex Zbyslaw Message-ID: <20071109171716.GA16016@kobe.laptop> References: <472647A0.3030009@brookes.ac.uk> <20071030113912.GB3941@kobe.laptop> <20071109155558.GF8728@amilo.cenkes.org> <20071109160809.GA14984@kobe.laptop> <47348BF9.7050402@dial.pipex.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <47348BF9.7050402@dial.pipex.com> X-Hellug-MailScanner: Found to be clean X-Hellug-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-3.992, required 5, autolearn=not spam, ALL_TRUSTED -1.80, AWL 0.41, BAYES_00 -2.60) X-Hellug-MailScanner-From: keramida@ceid.upatras.gr X-Spam-Status: No Cc: freebsd-questions@freebsd.org Subject: Re: Dangers of using a non-base shell X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2007 17:18:03 -0000 On 2007-11-09 16:34, Alex Zbyslaw wrote: > > [ discussing `su -m' option ] > > Also the only way I know on FreeBSD to interactively become a user > with no real shell (true, nologin etc). It should be possible to type: su username i.e. here's an ftp session on my laptop: root@kobe:/root# fgrep ftp: /etc/passwd ftp:*:1003:1003:& user:/home/ftp:/usr/sbin/nologin root@kobe:/root# su ftp root@kobe:/root$ id uid=1003(ftp) gid=1003 groups=1003 root@kobe:/root$ Good idea, though :)