Re: [blfs-support] noshell

2013-11-05 Thread Richard Melville
After looking at tons of logs of people trying to log into a system using ssh and guessing usernames and passwords, I've given up trying to monitor such foolishness. I'd only want to bother to do something like that in a very high security situation. Perhaps this is a package for Hardened

Re: [blfs-support] noshell

2013-11-05 Thread Bruce Dubbs
Richard Melville wrote: After looking at tons of logs of people trying to log into a system using ssh and guessing usernames and passwords, I've given up trying to monitor such foolishness. I'd only want to bother to do something like that in a very high security situation. Perhaps this is

Re: [blfs-support] noshell

2013-11-04 Thread Richard Melville
On 4 November 2013 07:00, blfs-support-requ...@linuxfromscratch.org wrote: Send blfs-support mailing list submissions to Richard Melville wrote: Does anybody have any experience of noshell as a replacement for /bin/false and /dev/null? I realise that it's quite old, but is it still

Re: [blfs-support] noshell

2013-11-04 Thread Bruce Dubbs
Simon Geard wrote: On Sun, 2013-11-03 at 11:03 -0600, Bruce Dubbs wrote: I'm unaware why noshell would be an advantage over /bin/false. What does it do that is needed? Most google results indicate that it's to do with logging - that noshell will report that someone attempted to obtain a

[blfs-support] noshell

2013-11-03 Thread Richard Melville
Does anybody have any experience of noshell as a replacement for /bin/false and /dev/null? I realise that it's quite old, but is it still useful as a more secure way of creating a user with no login shell? Fish.com, together with the titan hardening package, seems to have morphed into a a

Re: [blfs-support] noshell

2013-11-03 Thread Bruce Dubbs
Richard Melville wrote: Does anybody have any experience of noshell as a replacement for /bin/false and /dev/null? I realise that it's quite old, but is it still useful as a more secure way of creating a user with no login shell? Fish.com, together with the titan hardening package, seems to

Re: [blfs-support] noshell

2013-11-03 Thread Simon Geard
On Sun, 2013-11-03 at 11:03 -0600, Bruce Dubbs wrote: I'm unaware why noshell would be an advantage over /bin/false. What does it do that is needed? Most google results indicate that it's to do with logging - that noshell will report that someone attempted to obtain a shell as a system user,