Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
Re: dhcp client
From: Andreas Ericsson (exonop5.se)
Date: Wed Feb 04 2004 - 11:00:45 CST
I don't think that's a very good solution, considering system process
pseudo-users should have /bin/false as their shell.
If any of those pseudo-users need to run a shell command, execution would
fail. If the check is only performed when an interactive shell is spawned
it might be useful, but then it could be bypassed by 'unexpected' actions
(which is what to expect from script kiddies).
Mvh / Best Regards
Andreas Ericsson / Sourcerer
+46 (0)733 709032
On Wed, 4 Feb 2004, Berend-Jan Wever wrote:
> PS. I modified my "/bin/sh" to only run when the user executing it doesn't
> have "/bin/false" as shell in "/etc/passwd". It's a lame security trick
> that's easily bypassed, but it does keep the script kiddies out. Maybe it's
> something Owl could use ?