Security Basics mailing list archives
Re: Root account desactivated
From: sil <jesus () resurrected us>
Date: Thu, 11 Mar 2004 20:58:36 -0500 (EST)
Of course it would change every single locked account, mind you it was the only thing I was able to think of for this situation. Obviously (well hopefully) the admin would take the proper measure to ensure corrections, and perhaps an installation of tools like sudo or learn ACL's. You should just grep root to make the change only to root, however I use Solaris so my settings wouldn't be the same as this user. It was just an idea, so 'pardon me' everyone for not pointing this out. sed '/root/s/\/sbin/\/nologin/\/bin\/bash/g' /etc/passwd >> /tmp/passwd ; mv /tmp/passwd /etc/passwd This is what would be the correct way to do it, if it would even work under sudo. So apologies to those who changed all their accounts incorrectly. Even Jesus makes mistakes. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= "The most tyrannical of governments are those which make crimes of opinions, for everyone has an inalienable right to his thoughts." -- Benedict Spinoza J. Oquendo //sil http://www.kungfunix.net http://www.politrix.org http://www.infiltrated.net http://bush.shafted.us On Thu, 11 Mar 2004, Paul Mohr wrote:
On Mar 11, 2004, at 5:50 PM, sil wrote:If you have sudo on the machine you can try doing something like sudo sed 's/\/sbin/\/nologin/\/bin\/bash/g' /etc/passwd >> /tmp/passwd|\ mv /tmp/passwd /etc/passwdMind you that would change every single locked out account to have a shell of '/bin/bash'. Not just root.
--------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ----------------------------------------------------------------------------
Current thread:
- Root account desactivated MARTIN M. Bénoni (Mar 11)
- Re: Root account desactivated sil (Mar 11)
- Re: Root account desactivated Paul Mohr (Mar 12)
- Re: Root account desactivated sil (Mar 12)
- Re: Root account desactivated Michael Gale (Mar 12)
- Re: Root account desactivated Dan Trainor (Mar 12)
- Re: Root account desactivated - confirmed Alvin Oga (Mar 12)
- Re: Root account desactivated Michael Gale (Mar 12)
- Re: Root account desactivated Patrice Neff (Mar 15)
- Re: Root account desactivated Paul Mohr (Mar 12)
- Re: Root account desactivated Ansgar -59cobalt- Wiechers (Mar 12)
- Re: Root account desactivated Paul Mohr (Mar 12)
- Re: Root account desactivated mike (Mar 12)
- Re: Root account desactivated Adam Brewster (Mar 12)
- Re: Root account desactivated Torry Crass (Mar 12)
(Thread continues...)
- Re: Root account desactivated sil (Mar 11)