smb@research.att.com (Steven M. Bellovin) writes:
> /etc/shells was a response to a real problem:  ftp to accounts with 
> non-standard shells but widely-known passwords.  For example, back in the days 
> when it was created, lots of folks ran uucp, and lots of other folks knew the 
> uucp password.  They could then ftp in as uucp, and have full access to the 
> file system.  /etc/shells prevents that.

Was that what prompted /etc/shells?  I thought it was to prevent
someone from walking up to a logged in terminal and typing: "chshell
/tmp/haha".

-wolfgang
-- 
       Wolfgang Rupprecht <wolfgang+gnus@dailyplanet.wsrcc.com>
		    http://www.wsrcc.com/wolfgang/
DGPS signals via the Internet  http://www.wsrcc.com/wolfgang/gps/dgps-ip.html