Tiny Core Linux

Tiny Core Base => TCB Bugs => Topic started by: ixbrian on August 02, 2010, 08:13:55 PM

Title: /etc/passwd entry for "nobody" user
Post by: ixbrian on August 02, 2010, 08:13:55 PM

In Tiny Core 3.0, the /etc/passwd entry for "nobody" is:

nobody:x:65534:65534:nobody:/bin/false

The home directory field is missing, so the system is using "/bin/false" as the home directory instead of the shell.  This has the effect of allowing the nobody user to login with a shell if a password was set for nobody, instead of using "/bin/false" as the shell which should immediately log the user out.  

To fix this, the  /etc/passwd entry could be set to something like this that specifies a home directory:

nobody:x:65534:65534:nobody:/nonexistent:/bin/false

Since this correction will change the behavior of nobody, I think there is a small chance it could cause regressions with extensions that use the nobody user. 

Thanks,
Brian

Title: Re: /etc/passwd entry for "nobody" user
Post by: roberts on August 07, 2010, 10:36:56 AM

Done. Thanks.