Subject: Re: Unnecessary standard accounts (Was: Root, toor accounts.)
To: Marc Baudoin <email@example.com>
From: Perry E. Metzger <firstname.lastname@example.org>
Date: 03/15/1999 16:52:28
How about we disable user operator's shell and be done with it?
Marc Baudoin <email@example.com> writes:
> David Brownlee <firstname.lastname@example.org> =E9crit :
> > =
> > As an added bonus the operator user is not in the operator group,
> > so cannot run shutdown even if you give it a valid password.
> > Aaaaah...
> > =
> > My inclination wold be to:
> > a) Put operator in the operator group. This at least opens the
> > possibility of it being useful as an operator.
> > b) Switch its default shell to /sbin/nologin to quiet security.
> Whereas the operator group is extremely useful, I still don't
> think the operator user is. But your proposal is OK if you want
> to keep the operator user.
> -- =
> Marc Baudoin -=3D- <email@example.com>