From owner-freebsd-stable Mon Jan 7 15:41:14 2002 Delivered-To: freebsd-stable@freebsd.org Received: from carme.recalldesign.com (carme.recalldesign.com [203.15.93.5]) by hub.freebsd.org (Postfix) with ESMTP id 3BDA337B400 for ; Mon, 7 Jan 2002 15:41:10 -0800 (PST) Received: from io.internal.recalldesign.com (mail.internal.recalldesign.com [203.15.93.150]) by carme.recalldesign.com (8.11.6/8.11.6) with ESMTP id g07NXse55166; Tue, 8 Jan 2002 10:03:54 +1030 (CST) (envelope-from mike@vee.net) Received: from vee.net (polarlander.internal.recalldesign.com [203.15.93.252]) by io.internal.recalldesign.com (8.11.6/8.11.6) with ESMTP id g07Nf5J16395; Tue, 8 Jan 2002 10:11:06 +1030 (CST) (envelope-from mike@vee.net) Message-ID: <3C3A3211.4050307@vee.net> Date: Tue, 08 Jan 2002 10:11:05 +1030 From: Michael Gratton User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.7+) Gecko/20020103 X-Accept-Language: en-au, en-gb, en MIME-Version: 1.0 To: pjklist@ekahuna.com Cc: Matthew Whelan , stable@FreeBSD.ORG Subject: Re: Using bash as default shell for root References: <3C3857BF.14569.1674F2@localhost> <3C39B6E6.26335.4C2017@localhost> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Philip J. Koenig wrote: > > Which brings me to: can anyone provide any insight as to what > possible problems one might encounter if one were to do just this: > statically compile bash, put it in /bin, make it root's default > shell, and use it during single-user mode? Why don't you just use the "toor" user - the "Bourne-again super user"; that is what it is there for. Set toor's shell to be bash and leav root's shell alone. When you need to do any work as root, do a `su toor` instead of just a `su`. When you're in single user mode, you'll default to using root and you won't have any problems (apart from using a non-bash shell for maintenance and emergency work). Another alternative would be to use sudo, which also neatly circumvents the problem. I've used both mechanisms, and have been quite happy with them. I'm tending to use sudo more than toor these days, mostly because it's more convenient for me, secure, etc. Mike. -- Mike Gratton Leader in leachate production and transmission since 1976. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message