From owner-freebsd-security  Fri Mar 22 12:50:53 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mailout06.sul.t-online.com (mailout06.sul.t-online.com [194.25.134.19])
	by hub.freebsd.org (Postfix) with ESMTP id 65A9B37B4BF
	for <freebsd-security@freebsd.org>; Fri, 22 Mar 2002 12:50:01 -0800 (PST)
Received: from fwd04.sul.t-online.de 
	by mailout06.sul.t-online.com with smtp 
	id 16oVz5-0007q9-04; Fri, 22 Mar 2002 21:49:59 +0100
Received: from pc5.abc (520067998749-0001@[217.233.96.143]) by fmrl04.sul.t-online.com
	with esmtp id 16oVyz-1w74VcC; Fri, 22 Mar 2002 21:49:53 +0100
Received: (from nicolas@localhost)
	by pc5.abc (8.11.6/8.11.6) id g2MKnqE01801
	for freebsd-security@FreeBSD.ORG; Fri, 22 Mar 2002 21:49:52 +0100 (CET)
	(envelope-from list@rachinsky.de)
Date: Fri, 22 Mar 2002 21:49:51 +0100
From: Nicolas Rachinsky <list@rachinsky.de>
To: FreeBSD Security <freebsd-security@FreeBSD.ORG>
Subject: Re: su -c user command not working
Message-ID: <20020322204951.GB529@pc5.abc>
Mail-Followup-To: FreeBSD Security <freebsd-security@FreeBSD.ORG>
References: <20020322165816.A561@iib.unsam.edu.ar> <20020322153657.A3593@mail.slc.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020322153657.A3593@mail.slc.edu>
User-Agent: Mutt/1.3.28i
X-Powered-by: FreeBSD
X-Homepage: http://www.rachinsky.de
X-PGP-Keyid: C11ABC0E
X-PGP-Fingerprint: 19DB 8392 8FE0 814A 7362  EEBD A53B 526A C11A BC0E
X-PGP-Key: http://www.rachinsky.de/nicolas/nicolas_rachinsky.asc
X-Sender: 520067998749-0001@t-dialin.net
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

* Anthony Schneider <aschneid@mail.slc.edu> [2002-03-22 15:36:57 -0500]:
> the -c flag passes a command to the shell of the user you are su'ing to,

man su
...
     -c class
             Use the settings of the specified login class.  Only allowed for
             the super-user.
...


> so since user man's shell is /sbin/nologin, /sbin/nologin is (according
> to su) supposed to interpret the command 'catman' and execute it,
> however /sbin/nologin doesn't interpret commands, it just prints the
> message "This account is currently unavailable" (just as it did for you)
> and then exits.  for 'su -c' to work, the user you are su'ing to needs
> something to actually interpret the command.  i suggest you either change
> that user's passwd info to have such a shell, or you to an account that
> has such a shell.

I think for 'su -c' to work as expected here, you have to use some
linux distri ;-)

Nicolas

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message