Bug 74737

Summary:	Guest user is created with shell /dev/null instead of /bin/false in /etc/passwd
Product:	Gentoo Linux	Reporter:	Oliver Boettcher <oliver>
Component:	[OLD] baselayout	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED FIXED
Severity:	minor	CC:	radek
Priority:	High
Version:	2004.3
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Oliver Boettcher 2004-12-17 02:55:19 UTC

In stage2-athlon-xp-2004.3 tarball the /etc/passwd contains guest:x:405:100:guest:/dev/null:/dev/null which should be guest:x:405:100:guest:/dev/null:/bin/false if not in use.
Weather I do not know if this is a security issue (like ssh breakin attemt) nor if it is present in other tarballs too.

Reproducible: Always
Steps to Reproduce:
1. tar xvfj stage2-athlon-xp-2004.3.tar.bz2
2.
3.

Comment 1 SpanKY gentoo-dev

2004-12-17 06:35:49 UTC

it really shouldnt matter whether it's /dev/null or /bin/false

personally i vote for removing guest all together ;)

Comment 2 Oliver Boettcher 2004-12-17 07:39:19 UTC

ok, this should be removed and handled by user.

Comment 3 SpanKY gentoo-dev

2005-01-30 13:28:10 UTC

user has been punted