Debian bug report logs - #1667, boring messages

Subject: Bug#1667: chsh can change the login shell to anything
Reply-To: Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>, debian-bugs@pixar.com
Resent-From: Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>
Resent-To: debian-devel@pixar.com
Resent-Date: Fri, 13 Oct 1995 14:48:02 GMT
Resent-Message-ID: <debian-bugs-handler.1667.B10131439310@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: chfn
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Fri, 13 Oct 1995 14:48:02 GMT
Received: with rfc822 via encapsulated-mail; Fri, 13 Oct 1995 14:39:29 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t3lCS-000DMWC; Fri, 13 Oct 95 07:35 PDT
Received: from i17linuxb.ists.pwr.wroc.pl by pixar.com with SMTP id AA05061
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Fri, 13 Oct 1995 07:34:37 -0700
Received: (from marekm@localhost) by i17linuxb.ists.pwr.wroc.pl (8.6.12/8.6.9) id PAA01745 for debian-bugs@pixar.com; Fri, 13 Oct 1995 15:34:43 +0100
From: Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>
Message-Id: <199510131434.PAA01745@i17linuxb.ists.pwr.wroc.pl>
To: debian-bugs@pixar.com
Date: Fri, 13 Oct 1995 15:34:41 +0100 (MET)
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Content-Length: 1139

Package: chfn
Version: 1.0-4

This is even documented in the man page, but I think this is wrong:
for ordinary users, chsh should only change the shell to one of the
valid shells listed in /etc/shells (and only if the shell actually
exists and is executable), and only for users who have a valid and
not restricted shell.

The -l (--list-shells) option should only list the shells which are
listed in /etc/shells AND executable by the user, otherwise it is
the same as "cat /etc/shells".

Believe me, on a system with 100 users or so, users who forget their
passwords cause enough trouble.  I don't want users to be able to
screw up themselves so easily and then go to me to fix their login
shell :-(.

Typical example: user logs in over a modem (noisy phone line - this
is quite common here in Poland, the maximum usable speed is often
300bps :-( ) and the new login shell has just one character wrong.
They will notice the warning message, but after a while the modem
drops the connection due to too much noise and the user can't log
in again to fix the problem.

There are good reasons for the traditional UN*X chsh behaviour...

Marek

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Marek Michalkiewicz <marekm@i17linuxb.ists.pwr.wroc.pl>
Subject: Bug#1667: Acknowledgement (was: chsh can change the login shell to anything)
In-Reply-To: <199510131434.PAA01745@i17linuxb.ists.pwr.wroc.pl>
References: <199510131434.PAA01745@i17linuxb.ists.pwr.wroc.pl>

Thank you for the problem report you have sent regarding Debian GNU/Linux.
This is an automatically generated reply, to let you know your message has
been received.  It is being forwarded to the developers' mailing list for
their attention; they will reply in due course.

If you wish to submit further information on your problem, please send
it to debian-bugs@pixar.com, but please ensure that the Subject
line of your message starts with "Bug#1667" or "Re: Bug#1667" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)