freebsd security - Jul 2004 - bash as a login shell (was Root users shell == no existant shell /bin/bash)

On 9 Jul 2004 at 13:11, Daniel Brown wrote:
> On the other hand, I've run across a sysadmin who always enables his
> toor accounts -- and changes its shell to bash.  As a result, not only
> is there an alternate root account (good in case 'root' trampled on
by
> accident or purpose), but you can get root bash as a login shell while
> leaving the real root to its normal shell.
This make it sound like you find it very bothersome to login and type 
'bash' (or whatever), to give yourself the shell you want.  Is that 
so?
-- 
Dan Langille : http://www.langille.org/

Something I found long ago was adding this line to your root's .cshrc


This make it sound like you find it very bothersome to login and type 
'bash' (or whatever), to give yourself the shell you want.  Is that 
so?
-- 
Dan Langille : http://www.langille.org/

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to
"freebsd-security-unsubscribe@freebsd.org"

Something I found long ago was adding this line to your root's .cshrc

[ -x /usr/local/bin/bash ] && exec /usr/local/bin/bash

That way you don't have to mess with changing the shell, and yet you get
bash on login.




This make it sound like you find it very bothersome to login and type 
'bash' (or whatever), to give yourself the shell you want.  Is that 
so?

Wrote Dan Langille:
> On 9 Jul 2004 at 13:11, Daniel Brown wrote:
> 
> > On the other hand, I've run across a sysadmin who always enables
his
> > toor accounts -- and changes its shell to bash.  As a result, not only
> > is there an alternate root account (good in case 'root'
trampled on by
> > accident or purpose), but you can get root bash as a login shell while
> > leaving the real root to its normal shell.
> 
> This make it sound like you find it very bothersome to login and type 
> 'bash' (or whatever), to give yourself the shell you want.  Is that
> so?
When you prefer to use a shell every single time, then having to type
'bash' is an unnecessary bother every time.  This is more so when you
work in a group of admins -- some people are less tolerant of manually
entering a different shell than others.

To be honest, also, it's not always very obvious which shell you log
into at first.  Just going to the right shell in the first place
removes the confusion.

      -Daniel