On 06/06/11 15:06, Kapetanakis Giannis wrote:
> I think the following diff will totally improve OpenBSD security (overall)
>
> --- etc/master.passwd.old       Sat Jul 10 02:37:16 2010
> +++ etc/master.passwd Mon Jun  6 15:04:15 2011
> @@ -1,4 +1,4 @@
> -root::0:0:daemon:0:0:Charlie&:/root:/bin/ksh
> +root::0:0:daemon:0:0:Chuck Norris&:/root:/bin/ksh
>    daemon:*:1:1::0:0:The devil himself:/root:/sbin/nologin
>    operator:*:2:5::0:0:System&:/operator:/sbin/nologin
>    bin:*:3:7::0:0:Binaries Commands and Source:/:/sbin/nologin
>
> Who is this 'Charlie' guy anyway???

Chuck does not su - to exec
Root does su - chuck

Giannis

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]

Reply via email to