Re: daily run output passwd diff

2001-11-13 Thread Crist J. Clark
On Mon, Nov 12, 2001 at 10:19:31PM -0800, John Baldwin wrote: On 13-Nov-01 Crist J. Clark wrote: What if someone comments out a line in the password file of a user? Then this won't hide that password. When this originally went in, it took a long while to get a sed line people were

Re: daily run output passwd diff

2001-11-13 Thread Robert Watson
On Mon, 12 Nov 2001, John Baldwin wrote: What if someone comments out a line in the password file of a user? Then this won't hide that password. When this originally went in, it took a long while to get a sed line people were happy with. Replacing the version number is a minor thing,

Re: daily run output passwd diff

2001-11-13 Thread John Baldwin
On 13-Nov-01 Robert Watson wrote: On Mon, 12 Nov 2001, John Baldwin wrote: What if someone comments out a line in the password file of a user? Then this won't hide that password. When this originally went in, it took a long while to get a sed line people were happy with. Replacing

Re: daily run output passwd diff

2001-11-13 Thread Robert Watson
On Tue, 13 Nov 2001, John Baldwin wrote: My temptation would actually be to ignore any commented lines in either file for the purposes of the diff. For the purposes of security checking, you care mostly about the uncommented lines. This would allow the script to exclude content when

Re: daily run output passwd diff

2001-11-13 Thread John Baldwin
On 13-Nov-01 Robert Watson wrote: On Tue, 13 Nov 2001, John Baldwin wrote: My temptation would actually be to ignore any commented lines in either file for the purposes of the diff. For the purposes of security checking, you care mostly about the uncommented lines. This would allow

Re: daily run output passwd diff

2001-11-13 Thread Crist J. Clark
On Tue, Nov 13, 2001 at 02:31:48PM -0800, John Baldwin wrote: On 13-Nov-01 Robert Watson wrote: On Tue, 13 Nov 2001, John Baldwin wrote: My temptation would actually be to ignore any commented lines in either file for the purposes of the diff. For the purposes of security

Re: daily run output passwd diff

2001-11-13 Thread Giorgos Keramidas
On 2001-11-13 15:31:02, Crist J. Clark wrote: echo $host passwd diffs: - diff $bak/master.passwd.bak /etc/master.passwd |\ - sed 's/^\([] [^#][^:]*\):[^:]*:/\1:(password):/' + diff -I '^#' $bak/master.passwd.bak

Re: daily run output passwd diff

2001-11-12 Thread John Baldwin
On 11-Nov-01 Crist J. Clark wrote: On Fri, Nov 09, 2001 at 02:55:55PM +0100, Alexander Leidinger wrote: Hi, I think the CVS tag shouldn't be interpreted as an entry which contains a password. ---snip--- Backup passwd and group files: 1c1 # $FreeBSD:(password):09:07 peter Exp $

Re: daily run output passwd diff

2001-11-12 Thread Crist J. Clark
On Mon, Nov 12, 2001 at 08:08:37AM -0800, John Baldwin wrote: On 11-Nov-01 Crist J. Clark wrote: On Fri, Nov 09, 2001 at 02:55:55PM +0100, Alexander Leidinger wrote: Hi, I think the CVS tag shouldn't be interpreted as an entry which contains a password. ---snip--- Backup

Re: daily run output passwd diff

2001-11-12 Thread John Baldwin
On 13-Nov-01 Crist J. Clark wrote: What if someone comments out a line in the password file of a user? Then this won't hide that password. When this originally went in, it took a long while to get a sed line people were happy with. Replacing the version number is a minor thing, but

Re: daily run output passwd diff

2001-11-10 Thread Crist J. Clark
On Fri, Nov 09, 2001 at 02:55:55PM +0100, Alexander Leidinger wrote: Hi, I think the CVS tag shouldn't be interpreted as an entry which contains a password. ---snip--- Backup passwd and group files: 1c1 # $FreeBSD:(password):09:07 peter Exp $ --- # $FreeBSD:(password):27:16 ache

daily run output passwd diff

2001-11-10 Thread Alexander Leidinger
Hi, I think the CVS tag shouldn't be interpreted as an entry which contains a password. ---snip--- Backup passwd and group files: 1c1 # $FreeBSD:(password):09:07 peter Exp $ --- # $FreeBSD:(password):27:16 ache Exp $ 16a17 www:(password):80:80::0:0:World Wide Web