LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 05-29-2004, 10:33 PM   #1
Obie
Member
 
Registered: Apr 2004
Distribution: Red Hat
Posts: 290

Rep: Reputation: 30
Question Securing Passwd


What's the best way to secure /etc/passwd? I was reading I should remove accounts within passwd I don't need e.g. news, ftp, etc. Now what's the best way to remove it? Should I just comment the line e.g. "#" or remove it completely? Also is it best to backup this file and if so where?

Thank you.
 
Old 05-29-2004, 11:21 PM   #2
bureado
Member
 
Registered: Oct 2003
Location: Caracas
Distribution: Knoppix 3.3 (Debian sarge/sid)
Posts: 72

Rep: Reputation: 15
I don't recomend you comment any lines in /etc/passwd. Usually, password are really being stored in /etc/shadow, since this is a more secure way to store them. They are also encrypted, so you don't need to worry.

Nevertheles, it's good to control the access to /etc/shadow since brute force rippers might try to retrieve the shadow file and try to decrypt the passwords in there.

Those accounts (mail, news, ftp, etc.) are jailed, that means they're only given permission to execute some services, programs or to access some ports. They are used by parent processes which uses those 'services'. You don't need to delete them. If you want to do so (it might affect some system services, if you use them) the best way is to issue an "rmuser mail" (i.e.) command as root.
 
Old 05-29-2004, 11:28 PM   #3
jschiwal
Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 655Reputation: 655Reputation: 655Reputation: 655Reputation: 655Reputation: 655
If you take a closer look at accounts like ftp, news, etc., the password is an asterisk. This it used to prevent someone from logging on to the account.
 
Old 05-30-2004, 04:00 AM   #4
Obie
Member
 
Registered: Apr 2004
Distribution: Red Hat
Posts: 290

Original Poster
Rep: Reputation: 30
bureado,
-> Those accounts (mail, news, ftp, etc.) are jailed, that means they're only given permission to execute some services, programs or to access some ports.

How are they jailed? I thought jailing wasn't a "natural" process and had to be enforced manually.

jschiwal,
--> If you take a closer look at accounts like ftp, news, etc., the password is an asterisk. This it used to prevent someone from logging on to the account.

I am aware they have an asterik however I am attempting to comprehend why would a security guide suggest I remove them.
 
Old 05-30-2004, 09:44 AM   #5
bureado
Member
 
Registered: Oct 2003
Location: Caracas
Distribution: Knoppix 3.3 (Debian sarge/sid)
Posts: 72

Rep: Reputation: 15
It seems you are reading "Hackers in Linux"

"Jail" was not the term I must had used. I think it's ok to say that they're naturally harmless. Again, you should remove those who correspond to services you don't use. In example, I have removed "mail", "news", "ftp", since I don't run any servers of those.
 
Old 05-31-2004, 07:36 PM   #6
Obie
Member
 
Registered: Apr 2004
Distribution: Red Hat
Posts: 290

Original Poster
Rep: Reputation: 30
Thank you for your help
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
securing vsftp dshafi Linux - Security 3 08-31-2004 08:31 PM
Securing Mandrake 9.1? unixfreak Mandriva 8 08-19-2004 12:48 AM
Securing Server brentos Linux - Security 4 06-08-2004 11:57 AM
securing system g_arun22 Linux - Security 2 06-02-2003 05:16 AM
securing FTP radnix Linux - Security 3 09-16-2002 02:46 PM


All times are GMT -5. The time now is 01:41 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration