Date: Fri, 9 Jul 2004 13:11:26 -0700 From: Daniel Brown <djb@unixan.com> To: "Peter C. Lai" <sirmoo@cowbert.net> Cc: freebsd-security@freebsd.org Subject: Re: Root users shell == no existant shell /bin/bash Message-ID: <20040709131126.3b8d6d7b.djb@unixan.com> In-Reply-To: <20040709103342.GA2842@cowbert.net> References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAQalskDVfo0WQ/a0WxfyYA8KAAAAQAAAAHZLwubL1IEW8iaIucc4elAEAAAAA@ntscom.com> <200407091158.35803.anders@kommandoraden.info> <20040709103342.GA2842@cowbert.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Wrote Peter C. Lai:
> On Fri, Jul 09, 2004 at 11:58:35AM +0200, Anders Dahlqvist wrote:
> > torsdagen den 8 juli 2004 17.29 skrev Brandon Grace:
> > > I made a mistake setting my shell and have set the root users shell to
> > > /bin/bash instead of /bin/sh. I am curiuos if anyone knows how to fix this.
> > > The machines is FreeBSD 4.8-RELEASE-p4 and does not have sudo only su.
> >
> > ...and I gather that "su - toor" doesn't work either for some reason or other?
>
> toor has a disabled (*) password by default. What Brannon should have done was
> set a password for toor in the beginning, without mucking around with root's
> shell. But as a rule of thumb, you're probably superuser way too much if you
> develop an urge to change it shell anyway.
Some of us either have to do extensive work as root (I myself
extensively use shell programming on the command line -- which is not
easy nor sensible in either csh or tcsh), or find it extremely
annoying to use the least favorite shell during an emergency.
On the other hand, I've run across a sysadmin who always enables his
toor accounts -- and changes its shell to bash. As a result, not only
is there an alternate root account (good in case 'root' trampled on by
accident or purpose), but you can get root bash as a login shell while
leaving the real root to its normal shell.
Since then I've adopted this tip on the BSD system I run.
-Daniel
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040709131126.3b8d6d7b.djb>