Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
my question was How do I fix this. The invalid shell error is there because of my attempts to fix the errors The post and pre errors to mods. But I decided after the post that I had messed it up enough to justify a complete reload.
As mentioned, /bin/false is being reported as an invalid shell (likely so because it's not listed in /etc/shells). Instead, use /sbin/nologin if you're trying to prevent shell sessions but allow ftp sessions.
As mentioned, /bin/false is being reported as an invalid shell (likely so because it's not listed in /etc/shells). Instead, use /sbin/nologin if you're trying to prevent shell sessions but allow ftp sessions.
See the manpages for chsh(1).
Ok, thanks. but these are not errors??
dispatching POST_CMD_ERR command 'PASS (hidden)' to mod_delay
yep looks pretty innocuous to me except of course the shell thing which would be found in /etc/passwd, setting the shell to /sbin/nologin
Code:
'PASS (hidden)'
not an issue, you woudnt expect every password entered to be logged now would ya? that would be a huge security issue
This is why I thought it was an error.
Code:
POST_CMD_ERR
To the newbie it looks like an error and yes I was running d6 or something. I removed all lines that reffered to modules just in case. the problem turned out to be the fact that even though linux or proftpd created both an ftp user and an a group called no group it did not add user ftp to no group. I also added a user anonymous which I do not think I needed to do since it is used as an elias. This is a learning machine so I am stripping off everything I can (i.e. selinux) and getting everything working then adding stuff back. That way I have less stuff that can cause problems and I only have to learn about one thing at a time. At least thats the theory. once I get ftp working right I will install amp and wordpress. then maybe dns. I want to install all the different servers I can to learn how to build, install config and trouble shoot them then I will learn how to harden linux. I found an article with redneck directions on how to repackage a linux machine that will include all the changed config files so I have a chance of learning to build machines with the excact setup I want. It is a lot of reading but I do not allways understand the articles which is where expearment and posting comes in.
Thanks for your help.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
