From owner-freebsd-stable@freebsd.org Mon Jul 6 19:13:38 2020 Return-Path: Delivered-To: freebsd-stable@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2EECE36EC81 for ; Mon, 6 Jul 2020 19:13:38 +0000 (UTC) (envelope-from jonc@chen.org.nz) Received: from mail-ot1-x342.google.com (mail-ot1-x342.google.com [IPv6:2607:f8b0:4864:20::342]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4B0wG92rlLz4R8j for ; Mon, 6 Jul 2020 19:13:37 +0000 (UTC) (envelope-from jonc@chen.org.nz) Received: by mail-ot1-x342.google.com with SMTP id n24so30268164otr.13 for ; Mon, 06 Jul 2020 12:13:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chen-org-nz.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=niN3pHQziT2wcjeY8g0Mbg458QLUXT1/wtE/Vn0Zn8o=; b=L9wWT9BQ6F1izGqHSqC595/QRck0O27rAPFZm8GTbWiPsnt8P/yZpErpSFr81yPn8I D3WaWGFan3fneMGP3jWqcQqZEQNuZvJjrc8bvtef5Us/3b2PzsYrCE9sjE1yo5P3jZRL FzoBvtoZ6QF1JTO56sTQgiKAlFf8iXe4n9UlNM7v3BQ4AQmvvZay/cjimllUDlfrVUBJ MNqaaO0l01gBSsuvtaVN5YBqbim0gd9Zy9QnWPrCovD9qdm2pEmXY3BRbNwEATcvA0Va kIjxdbmEM1svDqO8LcMaAkFG/mjNTVRXXIqC8wY86Oc5NJtSVU9eiWXDSAcgqnbCIILI Ya1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=niN3pHQziT2wcjeY8g0Mbg458QLUXT1/wtE/Vn0Zn8o=; b=ihedLZMF+kdo5dUqeTCC+vLUN+If71vm1OaDWjdyV9QOzNFUKn2J2uJfGc3FzYSVmI DwmrT74x96FM3Att0A4SQ18UtHJQepshC8w23DUC8JRWx7zb3EqZhiDnx9emOjoEYmH7 pQCo2aEzDcRMuneQNLF/WDbUNh6Fg6/sabmsbqPp9plhoEFIZzPIjL4lJX4b7Q5rJcsr Bk+9OBxzM92ziFqMgMB73tADB4KjJnwM1PDd7OFZrx3IekSdxoG5IMyWxbRnBxIqNJj4 gFabOyLXJwly0uBPP5QHJp+1pF/keoVgwnN3crdF7AstyAmxqj87D6583STpJ1ifb68K oHjg== X-Gm-Message-State: AOAM531POyV+Zc+Jyz40kMp/WBNjJL2WQOU43B0+RYOC4VlYRh8/L4SU NGmI+XFlebD/08EDAoR9Vam2XRdndJY6XNKuhSj4Jw== X-Google-Smtp-Source: ABdhPJx3/WaaIwcYWGFhMkkjDesfjBdhsP8lFAf1iqcMZr9ngDMQFI/8QH0DBuOmXLxVKyA3wPkn0MzAsiw826g8yAQ= X-Received: by 2002:a9d:24e5:: with SMTP id z92mr45567229ota.255.1594062816205; Mon, 06 Jul 2020 12:13:36 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Jonathan Chen Date: Tue, 7 Jul 2020 07:13:19 +1200 Message-ID: Subject: Re: Getting a new shell to work for the 'toor' user To: Don Wilde Cc: freebsd-stable@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 4B0wG92rlLz4R8j X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=chen-org-nz.20150623.gappssmtp.com header.s=20150623 header.b=L9wWT9BQ; dmarc=none; spf=softfail (mx1.freebsd.org: 2607:f8b0:4864:20::342 is neither permitted nor denied by domain of jonc@chen.org.nz) smtp.mailfrom=jonc@chen.org.nz X-Spamd-Result: default: False [-2.63 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.96)[-0.962]; R_DKIM_ALLOW(-0.20)[chen-org-nz.20150623.gappssmtp.com:s=20150623]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.003]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-stable@freebsd.org]; DMARC_NA(0.00)[chen.org.nz]; R_SPF_SOFTFAIL(0.00)[~all]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[chen-org-nz.20150623.gappssmtp.com:+]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::342:from]; NEURAL_HAM_SHORT(-0.37)[-0.365]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 19:13:38 -0000 On Tue, 7 Jul 2020 at 07:10, Don Wilde wrote: > > All, > > I finally got around to -- I thought :) -- completing my inclusion of > bash-static as a usable shell. > > It works as an available shell in 'adduser', but when I tried to use it > as a recovery shell (see attached .odt), I ran into a problem. My fist > pass was to add /bin/stbash to the end of the toor line in > master.passwd, but that didn't change it even after a reboot. You have to use vipw(8). -- Jonathan Chen