taskTiger UNIX security tool - Tasks: task #3070, Standardize "noshell"...


You are not allowed to post comments on this tracker with your current authentication level.

task #3070: Standardize "noshell" shell definitions.

Submitted by:  Ryan Bradetich <rbrad>
Submitted on:  Mon 26 Jan 2004 07:06:54 AM UTC  
Category: Make Tiger easier to run/instShould Start On: Mon 01 Mar 2004 12:00:00 AM UTC
Should be Finished on: Sat 01 May 2004 12:00:00 AM UTCPriority: 5 - Normal
Status: NonePrivacy: Public
Percent Complete: 0%Assigned to: None
Open/Closed: OpenEffort: 0.00

Mon 26 Jan 2004 09:28:10 AM UTC, comment #1:

"Invalid Shell" is not really a good name. Invalid is a shell that does not exist in /etc/shells and can be executed in the system, but is unknown to Tiger (i.e. not csh, ash...). The "noshell" definition is a list of shells that look like they are invalid (might or might not exist in /etc/shells) but are usually used as shells for blocked (system) accounts in some operating systems.

Since this varies per operating system, and is used by different security checks, it should be a configuration item

Javier Fernandez-Sanguino Peña <jfs>
Project Administrator
Mon 26 Jan 2004 07:06:54 AM UTC, original submission:

We probably need to standarise the "invalid shell" defintion so that it can be configured per system and it can be used by both check_anonftp and check_accounts.

Ryan Bradetich <rbrad>
Project Member


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


CC list is empty


Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.


Please enter the title of George Orwell's famous dystopian book (it's a date):



Follows 1 latest change.

Date Changed By Updated Field Previous Value => Replaced By
Mon 26 Jan 2004 09:28:10 AM UTCjfsSummaryStandardize invalid shell definitions.=>Standardize "noshell" shell definitions.

Back to the top

Powered by Savane 3.1-cleanup1