--- Begin Message ---
Subject: |
Nobody has a shell |
Date: |
Wed, 13 Jul 2016 12:10:18 +0200 |
address@hidden ~/guix-packages$ grep nobody /etc/passwd
nobody:x:65534:997::/var/empty:/gnu/store/7cdd8s466qyjh64m0byq0rz9gk1jid40-bash-4.3.42/bin/bash
On my debian, this user is left out the door:
$ grep nobody /etc/passwd
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
Even its HOME directory is non existent, purposedly...
Is this not a security risk (greater attack surface) or something like that ?
--
Vincent Legoll
--- End Message ---
--- Begin Message ---
Subject: |
Re: bug#23971: Nobody has a shell |
Date: |
Thu, 14 Jul 2016 00:01:40 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) |
Vincent Legoll <address@hidden> skribis:
> address@hidden ~/guix-packages$ grep nobody /etc/passwd
> nobody:x:65534:997::/var/empty:/gnu/store/7cdd8s466qyjh64m0byq0rz9gk1jid40-bash-4.3.42/bin/bash
>
> On my debian, this user is left out the door:
>
> $ grep nobody /etc/passwd
> nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
>
> Even its HOME directory is non existent, purposedly...
Indeed, fixed in 2d94702ff4133606cda1e51a2c8378a8e79afb9d.
The ‘shell’ field was omitted from the definition of “nobody”, which is
why it ended up using Bash, which is the default shell.
Thanks!
Ludo’.
--- End Message ---