From owner-freebsd-stable  Tue Apr  3 11:23:21 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from poontang.schulte.org (poontang.schulte.org [209.134.156.197])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6B0CB37B71A; Tue,  3 Apr 2001 11:23:16 -0700 (PDT)
	(envelope-from christopher@schulte.org)
Received: from schulte-laptop.schulte.org ([64.183.199.40])
	by poontang.schulte.org (8.12.0.Beta5/8.12.0.Beta5) with ESMTP id f33IMfIr069444;
	Tue, 3 Apr 2001 13:22:48 -0500 (CDT)
Message-Id: <5.0.2.1.0.20010403131900.00af5eb0@pop.schulte.org>
X-Sender: schulte@pop.schulte.org
X-Mailer: QUALCOMM Windows Eudora Version 5.0.2
Date: Tue, 03 Apr 2001 13:22:18 -0500
To: Craig Cowen <craig@allmaui.com>, freebsd-security@FreeBSD.ORG
From: Christopher Schulte <christopher@schulte.org>
Subject: Re: su change?
Cc: freebsd-stable@FreeBSD.ORG
In-Reply-To: <3ACA12BD.A8706D97@allmaui.com>
References: <005401c0bc63$7cb36650$0202a8c0@majorzoot>
 <001f01c0bc68$681a2b20$1200a8c0@gsicomp.on.ca>
 <20010403140935.F9618@pir.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

At 11:13 AM 4/3/2001 -0700, Craig Cowen wrote:
>I worked at an isp and the office staff was responsible for terminating
>accounts. Well, one particular staff member kept screwing up in vi and wiping
>out the root user's entry.
>That's when I made them use chsh <user>
>
>I believe that it will give error messages like visudo to common mistakes.

Good grief.  One should always use utilities like vipw or chsh when editing 
the password databases.  They do sanity checking, locking, and other 
magically important tasks which a simple `vi` won't.

Not to mention that on FreeBSD, vipw and chsh will also run pwd_mkdb 
automatically.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message