From owner-freebsd-questions Tue Apr 3 3:16:22 2001 Delivered-To: freebsd-questions@freebsd.org Received: from ramstind.gtf.ol.no (ramstind.gtf.ol.no [128.39.174.16]) by hub.freebsd.org (Postfix) with ESMTP id 6BB3D37B71E for ; Tue, 3 Apr 2001 03:16:19 -0700 (PDT) (envelope-from trond@ramstind.gtf.ol.no) Received: from localhost (trond@localhost) by ramstind.gtf.ol.no (8.9.3/8.9.3) with ESMTP id MAA05284; Tue, 3 Apr 2001 12:11:03 +0200 (CEST) (envelope-from trond@ramstind.gtf.ol.no) Date: Tue, 3 Apr 2001 12:11:03 +0200 (CEST) From: =?ISO-8859-1?Q?Trond_Endrest=F8l?= To: Greg Lehey Cc: Aaron Hill , Subject: Re: Is there an equivalent of newgrp in FreeBSD? In-Reply-To: <20010403105642.B71213@wantadilla.lemis.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 3 Apr 2001, Greg Lehey wrote: > On Monday, 2 April 2001 at 22:53:33 +0000, Aaron Hill wrote: > > Solaris uses this field. To get a password into the field you have to copy > > and paste it from /etc/shadow. The password is then used by the newgrp > > command. I don't know about FreeBSD but for the above explained reasons I > > don't see why this field would be needed... ? > > According to group(5), it exists. I haven't checked the source code, > but I also can't see what use it might be. Well, I have currently no plan to use this feature, even if it's ready to be used. One use I just thought about is where security must be as tight as possible: If a user fails to login with the password for some group, then the user will not be granted the privileges associated with this group. To regain the lost privileges, the user must either login again or use some variety of newgrp requiring entering the correct group password. I don't know about login via SSH on such a system. -- ---------------------------------------------------------------------- Trond Endrestøl | trond@ramstind.gtf.ol.no Patron of The Art of Computer Programming| FreeBSD 3.5-S & Pine 4.31 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message