OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: /var filled up and can't login locally or remotely

From: Daniel Ouellet (danielpresscom.net)
Date: Wed May 10 2006 - 14:18:39 CDT


Greg Thomas wrote:
> On 5/10/06, Giancarlo Razzolini <linux-fanonda.com.br> wrote:
>> Paul de Weerd wrote:
>>
>> > Don't change root's shell.
>> >
>> >
>> > It's set to a static shell (/bin/ksh these days) for a reason.
>> >
>> >
>> Changing the root shell doesn't hurt. But you have to install your shell
>> static. I use the bash-static from packages, and hadn't any problems. I
>> think that booting in single and cleaning some trash, might solve the
>> problem. Also you might want to consider installing the bash-static.
>>
>
> As others have said there is no reason to change root's shell. And to
> expand upon that it's good practice to KISS. It's much easier to
> avoid problems and to fix them when they happen if as little is
> changed to root and the default system files as possible.

As good example to help understand this in practice is just like this.
You install your package bash-static, you think you are clever, fine.
Then time pass, you work with someone else, a new release come out, you
need to upgrade that box, but it happen to be remote. You forgot that
you replace the default shell as you didn't document your changes, or
your co worker didn't know you did this. Then you go as usual and follow
the GREAT upgrade from Nick for remote upgrade, remove the packages not
needed without thinking really. Your great BASH-Static is gone!

Then you continue your upgrade after the kernel install, reboot your box
and BANG!

Great your box still work with the new kernel, but hey, you can't login
anymore there can you. You have no more BASH shell on your system.

So, having the default shell replace from the default install is A VERY
bad idea!

If you don't believe me. Search the archive and this happen to people
very knowledgeable.

It will bit you one day for sure.

That's just one example, or you can think of this as well, you install
BASH-static right. Then you use packages update because you want the
latest of BASH without thinking as well. Sure it work, but then you new
updated version is NOT static in that case and then the first time you
system have problem, well again library as missing, etc.

Many example comes to mind if you think about it.

Use BASH for the users if you want, but leave the default root alone.

You have no idea all the trouble you will save yourself.

Daniel