Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: tanos on April 23, 2003, 01:50:07 AM

Title: security tara3.03
Post by: tanos on April 23, 2003, 01:50:07 AM

I run the logiciel tara on my e-smith 5.5 .
you can find the logiciel :www-arc.com/tara

I got this line which is a little mysterious:

# Checking accounts from /etc/passwd.
--WARN-- [acc001w] Login ID public is disabled, but still has a valid shell.
when i look in the file:
public:x:102:103:e-smith guest:/home/e-smith:/bin/false


Can you explain me what i should do ?

Title: Re: security tara3.03
Post by: Nathan Fowler on April 23, 2003, 02:50:06 AM

Nothing,  you are fine.  /bin/false will simply return 0 and upon connection the user will be immediately disconnected.  Unless /bin/false has been replaced with a trojan you have nothing to worry about.