From: Mike's List (mikelist@sky.net)
Date: Tue Apr 01 2003 - 13:59:00 EST
Maybe I'm not thinking right today or overlook something simple, but...
Anyone implementing root's shell to be /bin/false? Since most of us here
at work do sudo, and with so many bugs/patches required for sendmail, DNS,
and the likes, I can't keep up in a timely manner. I was just wondering if
anyone decided to have root shell as /bin/false --ie. easy enough to boot
the system via cdrom and recover, edit root's entry should it be necessary.
...or maybe another shell not sure if anything will be broken/requires for
root's shell to be /sbin/sh or not. Note, shell changes only, I'm not
suggesting passwd -l the account; but then no one needs to login as root
in the first place.
Thanks.
- Mike
[ In addition to www.sunfreeware.com more packages at ftp.patriots.net ]
-----
"They that can give up essential liberty to obtain a little
temporary safety deserve neither liberty nor safety."
-- Benjamin Franklin,
Historical Review of Pennsylvania.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:26:06 EDT