FS#1802 - [SECURITY] Postfix account should not have a valid shell

Attached to Project: Arch Linux
Opened by BlueRaven (BlueRaven) - Thursday, 18 November 2004, 14:20 GMT
Last edited by Dale Blount (dale) - Thursday, 18 November 2004, 14:34 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Dale Blount (dale)
Architecture not specified
Severity High
Priority Normal
Reported Version 0.7 Wombat
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

Hi, I noticed that the Postfix post-install routine creates the required postfix account with /bin/bash as its shell.
This is potentially dangerous, as the postfix account should have no valid executable shell.
This is stated in the official INSTALL file:

"used by any other user account. Preferably, this is an account that no-one
can log into. The account does not need an executable login shell, and
needs no existing home directory."

I hereby attach a simple patch against postfix.install.
(application/octet-stream)    postfix.install.patch (0.4 KiB)
This task depends upon

Closed by  Dale Blount (dale)
Thursday, 18 November 2004, 14:54 GMT
Reason for closing:  Fixed
Comment by Dale Blount (dale) - Thursday, 18 November 2004, 14:54 GMT
Thanks for the patch, it has been applied (slightly modified to fix existing installs) and commited.

Loading...