emacs-bug-tracker
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debbugs-tracker] bug#23971: closed (Nobody has a shell)


From: GNU bug Tracking System
Subject: [debbugs-tracker] bug#23971: closed (Nobody has a shell)
Date: Wed, 13 Jul 2016 22:02:02 +0000

Your message dated Thu, 14 Jul 2016 00:01:40 +0200
with message-id <address@hidden>
and subject line Re: bug#23971: Nobody has a shell
has caused the debbugs.gnu.org bug report #23971,
regarding Nobody has a shell
to be marked as done.

(If you believe you have received this mail in error, please contact
address@hidden)


-- 
23971: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=23971
GNU Bug Tracking System
Contact address@hidden with problems
--- Begin Message --- Subject: Nobody has a shell Date: Wed, 13 Jul 2016 12:10:18 +0200
address@hidden ~/guix-packages$ grep nobody /etc/passwd
nobody:x:65534:997::/var/empty:/gnu/store/7cdd8s466qyjh64m0byq0rz9gk1jid40-bash-4.3.42/bin/bash

On my debian, this user is left out the door:

$ grep nobody /etc/passwd
nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin

Even its HOME directory is non existent, purposedly...

Is this not a security risk (greater attack surface) or something like that ?

-- 
Vincent Legoll



--- End Message ---
--- Begin Message --- Subject: Re: bug#23971: Nobody has a shell Date: Thu, 14 Jul 2016 00:01:40 +0200 User-agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)
Vincent Legoll <address@hidden> skribis:

> address@hidden ~/guix-packages$ grep nobody /etc/passwd
> nobody:x:65534:997::/var/empty:/gnu/store/7cdd8s466qyjh64m0byq0rz9gk1jid40-bash-4.3.42/bin/bash
>
> On my debian, this user is left out the door:
>
> $ grep nobody /etc/passwd
> nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
>
> Even its HOME directory is non existent, purposedly...

Indeed, fixed in 2d94702ff4133606cda1e51a2c8378a8e79afb9d.

The ‘shell’ field was omitted from the definition of “nobody”, which is
why it ended up using Bash, which is the default shell.

Thanks!

Ludo’.


--- End Message ---

reply via email to

[Prev in Thread] Current Thread [Next in Thread]