LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-02-2015, 09:21 AM   #1
JockVSJock
Senior Member
 
Registered: Jan 2004
Location: SATX
Distribution: RHEL/CentOS
Posts: 1,166
Blog Entries: 4

Rep: Reputation: 131Reputation: 131
nobody user account passwd shows expired


A few of my servers show that this user id has expired.

I know that this is the name of a user account and group account and if I check out /etc/passwd there is an entry under /sbin/nologin. And, if I check under say top -u nobody, I don't see anything running for that user account. However that is the extent of my knowledge on this user account.

Should I be concerned that the passwd for this account is expired or are there cron jobs/programs that rely on this account?

thanks
 
Old 03-02-2015, 10:41 AM   #2
JeremyBoden
Member
 
Registered: Nov 2011
Posts: 939

Rep: Reputation: 174Reputation: 174
It's called nobody and set up so that nobody can use it.
If anyone ever gets access via nobody, it would be broken.
 
1 members found this post helpful.
Old 03-02-2015, 02:41 PM   #3
fatmac
Senior Member
 
Registered: Sep 2011
Location: Surrey/Hants Border, UK
Distribution: BSD & Linux - As long as they are Lightweight
Posts: 1,500

Rep: Reputation: Disabled
Every process has to be owned by someone, & the nobody account allows the system to run certain functions safely, as no one can use the nobody account to do anything, even if a cracker manages to access that account they can't do any damage.
 
Old 03-02-2015, 05:09 PM   #4
JockVSJock
Senior Member
 
Registered: Jan 2004
Location: SATX
Distribution: RHEL/CentOS
Posts: 1,166
Blog Entries: 4

Original Poster
Rep: Reputation: 131Reputation: 131
Doing more research, looks like nobody is an account that can't log in and typically owns cron jobs.

Just wondering though which of the cron jobs nobody owns? I see there are entries under /etc/passwd and /etc/group, however I just want a solid understanding of how this works.
 
Old 03-02-2015, 06:11 PM   #5
JeremyBoden
Member
 
Registered: Nov 2011
Posts: 939

Rep: Reputation: 174Reputation: 174
Are you sure nobody is of use to you?

Code:
sudo crontab -u nobody -l

no crontab for nobody
 
Old 03-02-2015, 09:26 PM   #6
Fred Caro
Member
 
Registered: May 2007
Posts: 999

Rep: Reputation: 166Reputation: 166
worry not nobody is meant to be just that, nobody- its is more of a command than a user.

Fred.
 
Old 03-03-2015, 08:51 AM   #7
JockVSJock
Senior Member
 
Registered: Jan 2004
Location: SATX
Distribution: RHEL/CentOS
Posts: 1,166
Blog Entries: 4

Original Poster
Rep: Reputation: 131Reputation: 131
Code:

[root@machinename ~]# crontab -u nobody -l

User account has expired
You (nobody) are not allowed to access to (crontab) because of pam configuration.
Code:

[root@machinename ~]# chage -l nobody
Last password change                                    : Aug 19, 2013
Password expires                                        : Oct 18, 2013
Password inactive                                       : Nov 22, 2013
Account expires                                         : never
Minimum number of days between password change          : 1
Maximum number of days between password change          : 60
Number of days of warning before password expires       : 7


Just want to make sure there are no cron jobs that are tied to nobody account.

Last edited by JockVSJock; 03-03-2015 at 08:52 AM.
 
Old 03-03-2015, 08:58 AM   #8
JockVSJock
Senior Member
 
Registered: Jan 2004
Location: SATX
Distribution: RHEL/CentOS
Posts: 1,166
Blog Entries: 4

Original Poster
Rep: Reputation: 131Reputation: 131
I went ahead and updated the passwd for nobody and will continue to monitor this server.

Code:
[root@machinename ~]# chage -l nobody
Last password change                                    : Mar 03, 2015
Password expires                                        : May 02, 2015
Password inactive                                       : Jun 06, 2015
Account expires                                         : never
Minimum number of days between password change          : 1
Maximum number of days between password change          : 60
Number of days of warning before password expires       : 7

[root@machinename ~]# crontab -u nobody -l
no crontab for nobody
thanks
 
Old 03-04-2015, 07:37 AM   #9
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,604

Rep: Reputation: 1241Reputation: 1241Reputation: 1241Reputation: 1241Reputation: 1241Reputation: 1241Reputation: 1241Reputation: 1241Reputation: 1241
You now have security vulnerability - a live account that can be hacked that belongs to the system.
 
  


Reply

Tags
linux, user account


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
user account got expired. Sunheer Linux - Newbie 6 02-21-2010 11:28 PM
cron reporting user account expired, chage -l shows it never expires? kschmitt Linux - Server 5 01-06-2010 09:18 AM
user can't change user account passwd rcmonroig Linux - Newbie 3 11-09-2009 10:44 PM
Expired user account? lt_wentoncha SUSE / openSUSE 2 04-27-2007 12:34 AM
user account expired ??? rahimzai Red Hat 3 10-10-2005 06:03 AM


All times are GMT -5. The time now is 12:53 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration