VanLUG Email Archive
A Z (arek_z@yahoo.com)
Thu, 11 Mar 1999 19:13:01 -0800 (PST)
Yes, it's a concern (small though) cause everyone has read access to
/etc/passwd now there is a user that has "no passwd" on the box.
_anyone_ can see that.
If it's shadowed, everyone in that list has a * so you wouldn't know.
If it wasn't a concern, then why have shadowed passwds?
-arek
---Curt Sampson <cjs@cynic.net> wrote:
>
> On Sun, 7 Mar 1999, A Z wrote:
>
> > One thing (however small) is by default the passwords aren't
shadowed.
>
> That's not even a small concern. I have no idea why Linux systems
> out there don't do this; on my Unix systems (*BSD, Solaris,
> Digital^WTrue 64 Unix, etc.) passwords are *always* shadowed, and
> there's no way even to turn this off.
>
> cjs
> --
> Curt Sampson <cjs@cynic.net> 604 801 5335 De gustibus, aut bene
aut nihil.
> The most widely ported operating system in the world:
http://www.netbsd.org
>
>
_________________________________________________________
DO YOU YAHOO!?
Get your free @yahoo.com address at http://mail.yahoo.com
This archive was generated by hypermail 2.0b3 on Thu 11 Mar 1999 - 19:13:16 PST