Subject: Re: bash problem 2
To: der Mouse <mouse@rodents.montreal.qc.ca>
From: Steven M. Bellovin <smb@research.att.com>
List: port-i386
Date: 01/13/2000 12:06:52
In message <200001131659.LAA01398@Twig.Rodents.Montreal.QC.CA>, der Mouse write
s:
> > when I change the shell for root to bash the chsh program send this
> > message:
>
> > "warning,unknown root shell"
>
> > 1.What can i do to make NetBSD to know this shell?
>
> Find whoever thought /etc/shells was a good idea and apply clue-stick
> vigorously?
/etc/shells was a response to a real problem: ftp to accounts with
non-standard shells but widely-known passwords. For example, back in the days
when it was created, lots of folks ran uucp, and lots of other folks knew the
uucp password. They could then ftp in as uucp, and have full access to the
file system. /etc/shells prevents that.
Of course, a better solution would be for ftpd to be a login-like mechanism
that used the user's shell to run 'exec /usr/libexec/realftpd', something that
uucpd isn't (or shouldn't) be capable of doing...
--Steve Bellovin