From owner-freebsd-questions  Mon Dec 22 20:52:38 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id UAA00864
          for questions-outgoing; Mon, 22 Dec 1997 20:52:38 -0800 (PST)
          (envelope-from owner-freebsd-questions)
Received: from blues.jpj.net (root@blues.jpj.net [204.97.17.146])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id UAA00859
          for <freebsd-questions@freebsd.org>; Mon, 22 Dec 1997 20:52:34 -0800 (PST)
          (envelope-from benh@jpj.net)
Received: from [192.168.10.1] (blake.eloquence.net [198.246.0.212]) by blues.jpj.net (backatcha) with ESMTP id XAA25227; Mon, 22 Dec 1997 23:52:22 -0500 (EST)
X-Sender: benh@blues.jpj.net
Message-Id: <v03102803b0c4f421fbf1@[192.168.10.1]>
In-Reply-To: <199712230350.TAA00998@kjsl.com>
References: 
 <Pine.BSF.3.96.971222214741.11353C-100000@shell.futuresouth.com>
 <Pine.SGI.3.96.971222170622.14913A-100000@ocala.cs.miami.edu>
 <Pine.BSF.3.96.971222214741.11353C-100000@shell.futuresouth.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Mon, 22 Dec 1997 22:54:16 -0600
To: Javier Henderson <javier@kjsl.com>
From: Ben Hockenhull <benh@jpj.net>
Subject: Re: Shooting yourself in the foot
Cc: freebsd-questions@freebsd.org
Sender: owner-freebsd-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

>Matthew D. Fuller writes:
> > On Mon, 22 Dec 1997, Joe "Marcus" Clarke wrote:
> >
> > > The way I fixed this when I did something similar was to take the system
> > > down to single user mode, `shutdown now`, then remount / as read/write,
> > > mount -u /, then edit /etc/shells to allow for /bin/false as a valid
> > > shell.  Bring the system back up to multi-user and login as a user
> > > allowed to su to root.  Then su to root using su -m, you should be able
> > > to issue a chsh root then.  If you have no ther users in wheel, then
> > > instaed of editing /etc/shells, use vipw to edit the password file and
> > > change roots shell back to something else.
> > No need to shutdown.
> > Just do a su -m, then use vipw to set root's shell back to sh (or csh if
> > you're REALLY perverse ;).
>
>	Well...
>
>bash-2.01$ su -m
>su: kerberos: not in root's ACL.
>Password:
>su: permission denied (shell).

Well, IIRC, you need to specify the path to a shell with an su -m.

like so:

bash-2.01$ su -m /bin/sh

Regards,

Ben


--
Ben Hockenhull
benh@jpj.net
"Revenge is a dish best served with pinto beans and muffins."