X-Recipient: archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status: No, hits=-2.4 required=5.0	tests=BAYES_00,FREEMAIL_FROM,RP_MATCHES_RCVD,T_TO_NO_BRKTS_FREEMAIL
X-Spam-Check-By: sourceware.org
Message-ID: <32657023.post@talk.nabble.com>
Date: Sat, 15 Oct 2011 01:24:59 -0700 (PDT)
From: gwodus <gwodusx AT xsmail DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Where is /bin/nologin
In-Reply-To: <20111014115530.GA31063@calimero.vinschen.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
References: <32647652 DOT post AT talk DOT nabble DOT com> <20111013212001 DOT GB7035 AT jethro DOT local DOT lan> <32649084 DOT post AT talk DOT nabble DOT com> <20111014083252 DOT GB12878 AT calimero DOT vinschen DOT de> <864630202 DOT 20111014140440 AT mtu-net DOT ru> <20111014115530 DOT GA31063 AT calimero DOT vinschen DOT de>
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Precedence: bulk
List-Id: <cygwin.cygwin.com>
List-Unsubscribe: <mailto:cygwin-unsubscribe-archive-cygwin=delorie DOT com AT cygwin DOT com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id p9F8PbCT016683



Corinna Vinschen-2 wrote:
> 
> On Oct 14 14:04, Andrey Repin wrote:
>> ...
>> I would advice against giving any clues about account status, for
>> security
>> reasons.
> 
> It's what Linux' /sbin/nologin' prints, too.  Actually it's the whole
> idea of /sbin/nologin' per the man page:
> 
>   $ man nologin
>   NOLOGIN(8)                BSD System Manager's Manual              
> NOLOGIN(8)
> 
>   NAME
>        nologin — politely refuse a login
>   [...]
> 
> Just `exit 0' should be replaced with `exit 1' since
> 
>   [...]
>   nologin displays a message that an account is not available and exits
>   non-zero.
> 
> 
> Corinna
> 
> -- 
> Corinna Vinschen                  Please, send mails regarding Cygwin to
> Cygwin Project Co-Leader          cygwin AT cygwin DOT com
> Red Hat
> 
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
> 

Nice script! Would be cool if it would be part of cygwin. Btw. was the
/etc/nologin.txt your addition? I think the original nologin doesn't even do
that. At least not on Debian, where I just checked. 

Although in general I agree with Andrey. I forgot all about /bin/false. So I
am using that now. In fact I checked on my Linux box. I see that most
"no-shell" users have /bin/false in /etc/passwd (like ftp or mysql). But
others have nologin (e.g. user sshd on my machine).

Thanks,
gwodus.
-- 
View this message in context: http://old.nabble.com/Where-is--bin-nologin-tp32647652p32657023.html
Sent from the Cygwin list mailing list archive at Nabble.com.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple