Subject: Re: bash problem 2
To: der Mouse <mouse@rodents.montreal.qc.ca>
From: Steven M. Bellovin <smb@research.att.com>
List: port-i386
Date: 01/13/2000 12:06:52
In message <200001131659.LAA01398@Twig.Rodents.Montreal.QC.CA>, der Mouse write
s:
> > when I change the shell for root to bash the chsh program send this
> > message:
> 
> >     "warning,unknown root shell"
> 
> > 1.What can i do to make NetBSD to know this shell?
> 
> Find whoever thought /etc/shells was a good idea and apply clue-stick
> vigorously?

/etc/shells was a response to a real problem:  ftp to accounts with 
non-standard shells but widely-known passwords.  For example, back in the days 
when it was created, lots of folks ran uucp, and lots of other folks knew the 
uucp password.  They could then ftp in as uucp, and have full access to the 
file system.  /etc/shells prevents that.

Of course, a better solution would be for ftpd to be a login-like mechanism 
that used the user's shell to run 'exec /usr/libexec/realftpd', something that 
uucpd isn't (or shouldn't) be capable of doing...

		--Steve Bellovin