Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 74737 - Guest user is created with shell /dev/null instead of /bin/false in /etc/passwd
Summary: Guest user is created with shell /dev/null instead of /bin/false in /etc/passwd
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] baselayout (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-12-17 02:55 UTC by Oliver Boettcher
Modified: 2005-01-30 13:28 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Oliver Boettcher 2004-12-17 02:55:19 UTC 
In stage2-athlon-xp-2004.3 tarball the /etc/passwd contains guest:x:405:100:guest:/dev/null:/dev/null which should be guest:x:405:100:guest:/dev/null:/bin/false if not in use.
Weather I do not know if this is a security issue (like ssh breakin attemt) nor if it is present in other tarballs too.

Reproducible: Always
Steps to Reproduce:
1. tar xvfj stage2-athlon-xp-2004.3.tar.bz2
2.
3.
Comment 1 SpanKY gentoo-dev 2004-12-17 06:35:49 UTC 
it really shouldnt matter whether it's /dev/null or /bin/false

personally i vote for removing guest all together ;)
Comment 2 Oliver Boettcher 2004-12-17 07:39:19 UTC 
ok, this should be removed and handled by user.
Comment 3 SpanKY gentoo-dev 2005-01-30 13:28:10 UTC 
user has been punted