"!" in /etc/shadow where there should be an "*"

fof3 · 07-28-2009, 06:28 PM

I am using Lenny. I saw a couple of "!" in /etc/shadow, where there should be an "*". I thought it might be a rootkit; and so I reinstalled. However, now they are still there. Can anyone tell me what "festival" is?

less /etc/shadow

root:$1$/Ei9RmiI$Zol9C9FfBluzLmTOa9pAm.:14452:0:99999:7:::
daemon:*:14452:0:99999:7:::
bin:*:14452:0:99999:7:::
sys:*:14452:0:99999:7:::
sync:*:14452:0:99999:7:::
games:*:14452:0:99999:7:::
man:*:14452:0:99999:7:::
lp:*:14452:0:99999:7:::
mail:*:14452:0:99999:7:::
news:*:14452:0:99999:7:::
uucp:*:14452:0:99999:7:::
proxy:*:14452:0:99999:7:::
www-data:*:14452:0:99999:7:::
backup:*:14452:0:99999:7:::
list:*:14452:0:99999:7:::
irc:*:14452:0:99999:7:::
gnats:*:14452:0:99999:7:::
nobody:*:14452:0:99999:7:::
libuuid:!:14452:0:99999:7:::
Debian-exim:!:14452:0:99999:7:::
statd:*:14452:0:99999:7:::
messagebus:*:14452:0:99999:7:::
avahi:*:14452:0:99999:7:::
gdm:*:14452:0:99999:7:::
haldaemon:*:14452:0:99999:7:::
hplip:*:14452:0:99999:7:::
edhe:$1$TjbN8Wy3$.3mj.lycq7pgg/sIIF1Mq/:14452:0:99999:7:::
festival:*:14452:0:99999:7:::

zQUEz · 07-28-2009, 07:24 PM

I might suggest it is a text-to-speech application:

Code:

[root@fedora ~]# yum info festival
Loaded plugins: dellsysidplugin2, refresh-packagekit
Available Packages
Name       : festival
Arch       : x86_64
Version    : 1.96
Release    : 12.fc11
Size       : 1.4 M
Repo       : updates
Summary    : Speech synthesis and text-to-speech system
URL        : http://www.cstr.ed.ac.uk/projects/festival/
License    : MIT and GPL+ and TCL
Description: Festival is a general multi-lingual speech synthesis system developed
           : at CSTR. It offers a full text to speech system with various APIs, as
           : well as an environment for development and research of speech synthesis
           : techniques. It is written in C++ with a Scheme-based command interpreter
           : for general control.