LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 08-28-2005, 10:10 PM   #1
reactnet
LQ Newbie
 
Registered: Mar 2005
Location: Romania
Distribution: Slackware
Posts: 4

Rep: Reputation: 0
problems with /bin/false


I am using vsftpd 2.0.3 installed from source and recently I have this problem. Users with /bin/false can't log in . When I put /bin/bash everything it's okay. Anyone can help me ? Thanks
 
Old 08-28-2005, 10:14 PM   #2
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,290

Rep: Reputation: 378Reputation: 378Reputation: 378Reputation: 378
Is /bin/false in /etc/shells? Most ftpds will not allow users to log in unless their shell is in /etc/shells. You can just add /bin/false to this file (i usually copy /bin/false to /bin/ftponly so I can remember what it's there for ).
 
Old 08-28-2005, 11:31 PM   #3
major.tom
Member
 
Registered: Jun 2003
Location: Canada
Distribution: Slackware (current); Gentoo (newbie)
Posts: 142

Rep: Reputation: 15
I believe using /bin/false is a security measure to prevent them from being able to login. For that reason, I would not add it to /etc/shells. If your user must be able to login, I would give them a "real" shell (eg. bash). Or you could try by adding /bin/true to /etc/shells and give them that as a default.

In my unmodified /etc/shells, /bin/false is not listed, but it is the default shell for several user id's which should not need login access.

Garry
 
Old 08-29-2005, 03:15 AM   #4
reactnet
LQ Newbie
 
Registered: Mar 2005
Location: Romania
Distribution: Slackware
Posts: 4

Original Poster
Rep: Reputation: 0
I try the variant with adding /bin/false in /etc/shells, and now my users can log in on ftp chrooted with -s /bin/false ..so they don't have access on ssh or telnet(shell). Whatever I think this is an issue with vsftpd, because security is the first goal and maybe in in next version it will be fixed. Thank you both.
 
Old 08-29-2005, 09:34 PM   #5
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,290

Rep: Reputation: 378Reputation: 378Reputation: 378Reputation: 378
It's not an issue, it's pretty standard behavior for an ftp server.Adding /bin/false to /etc/shells will not magically grant users with /bin/false as their shell the ability to login (after all it's a program that does nothing, which is pretty useless for a login shell). That's why it can be used as a "shell" for people who only need ftp access. Of course, you don't necessarily want all /bin/false users to necessarily be allowed ftp, which is why I copy it to /bin/ftponly as described above.
 
Old 08-29-2005, 10:19 PM   #6
major.tom
Member
 
Registered: Jun 2003
Location: Canada
Distribution: Slackware (current); Gentoo (newbie)
Posts: 142

Rep: Reputation: 15
Aha! Now I get your thinking.

You copy /bin/false to /bin/ftponly, then add /bin/ftponly to /etc/shells and setup the users you want to have ftp access only with /bin/ftponly.

I like that idea, especially since it doesn't open up any other doors (such as allowing system users ftp access).

Please excuse my thickness.

Garry
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
true or false? alaios Programming 7 07-16-2005 10:54 AM
SSH Problem /bin/false ultrix Linux - Security 2 06-17-2005 07:31 AM
Stupid mistake - changed root shell to /bin/false Kholnuu Linux - General 8 01-04-2005 03:48 AM
root /bin/false problem kaboom Linux - Newbie 6 10-24-2003 07:38 AM
.bin problems deezay Linux - General 5 04-15-2002 01:34 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 09:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration