Question: 6.54 Shadow + "Package Users"

Drew Ames jxa127 at verizon.net
Sat Feb 19 20:26:53 PST 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/19/2011 02:11 PM, bsquared wrote:
> Drew,
> I had another question about the tips you had posted for shadow.  I
> wonder if you could verify the permissions, it seems to me that they
> should be group writable as well.
>
>   -rwsr-xr-x "/bin/su"  root:shadow
>   -rwsr-xr-x "/usr/bin/chage"  root:shadow
>   -rwsr-xr-x "/usr/bin/chfn"  root:shadow
>   -rwsr-xr-x "/usr/bin/chsh"  root:shadow
>   -rwsr-xr-x "/usr/bin/expiry"  root:shadow
>   -rwsr-xr-x "/usr/bin/gpasswd"  root:shadow
>   -rwsr-xr-x "/usr/bin/newgrp"  root:shadow
>   -rwsrw-r-x "/bin/passwd"  root:shadow
>
> Thank you for your tips, they have been very useful, and I have
> finally completed chapter six without errors.
>
> -Brian
Hi Brian,

Congrats on making it through chapter 6!

The permissions you have are the same as what I have except for
/bin/passwd.
I've got -rwsr-xr-x for passwd.

I'm not sure that these commands need to be group writable -- although
that might help in BLFS when Shadow gets rebuilt after PAM is
installed. Still, I plan on changing the ownship and permissions back
to shadow:shadow before that I get to that point in BLFS.

Why were you thinking of making them group-writable?

Regards,

- -Drew
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1gmA0ACgkQ7ZZ4z2wRxN3wBQCZAd9La9nYh70CFd/J1GKaflJX
Y8AAnRay1LPhSg4jktdsyMVSA7hVBTlc
=U4e0
-----END PGP SIGNATURE-----




More information about the lfs-support mailing list