*BSD News Article 69552


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.anu.edu.au!harbinger.cc.monash.edu.au!news.rmit.EDU.AU!news.unimelb.EDU.AU!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!news.sdsmt.edu!nntp.uac.net!news.tufts.edu!blanket.mitre.org!news.mathworks.com!news2.mathworks.com!newscaster-1.mcast.net!cs.tu-berlin.de!zib-berlin.de!irz401!uriah.heep!news
From: j@uriah.heep.sax.de (J Wunsch)
Newsgroups: comp.unix.bsd.freebsd.misc
Subject: Re: Removing Users from FreeBSD 2.0
Date: 27 May 1996 17:39:11 GMT
Organization: Private BSD site, Dresden
Lines: 21
Message-ID: <4ocpbv$bko@uriah.heep.sax.de>
References: <4nvobf$dvu@news.starnet.net> <4nvuc8$622@atlas.uniserve.com>
  <slrn4qd93g.e7m.map@marikit.iphil.net> <slrn4qim1t.pol.map@marikit.iphil.net>
Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
NNTP-Posting-Host: localhost.heep.sax.de
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Newsreader: knews 0.9.6
X-Phone: +49-351-2012 669
X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F  93 21 E0 7D F9 12 D6 4E

map@marikit.iphil.net (Miguel A.L. Paraz) wrote:

> How about this script -- let's call it 'deluser'.
> Very crude, though - and no consistency checks!

> open (H, ">/etc/master.passwd");
> print H @master_passwd;
> close (H);

This is a security problem.  You need to set the process' umask to
077 before creating the new master.passwd.

Better recreate /etc/passwd by running ``pwd_mkdp -p'' (along with the
db files).

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)