[cfarm-users] Changing shell with chsh without being prompted for password

Segher Boessenkool segher at kernel.crashing.org
Tue Jul 17 17:17:02 CEST 2018


Hi!

On Tue, Jul 17, 2018 at 12:44:09PM +0200, Baptiste Jonglez via cfarm-users wrote:
> As an experiment, we have just added PAM configuration to gcc13 and gcc14
> so that chsh does not ask for a password.

Cool.  Thanks for doing this.

> If you know about any security issues that could arise from this setting,
> please speak up!  If everything looks fine, we will deploy this setting to
> all farm machines.

It looks fine to me wrt security.

Two problems with it, probably not very serious:

1) Not all machines use PAM;
2) Will we now get _more_ requests for help?  If someone messes up their
login shell setting, they cannot fix it themselves.


Segher


More information about the cfarm-users mailing list