[arch-dev-public] [signoff] pkgstats 2.1-1

Gaetan Bisson bisson at archlinux.org
Mon Sep 13 16:32:26 EDT 2010


[2010-09-13 18:00:07 +0200] Pierre Schmitz:
> On Mon, 13 Sep 2010 16:52:07 +0200, Gaetan Bisson
> <bisson at archlinux.org> wrote:
> > 
> > This can be overriden by "su -s /bin/sh nobody"; the issue here is that
> > the third field of nobody's entry in /etc/shadow (which indicates when
> > the password was last changed) is set to "0" (any positive value would
> > work).
> 
> Interesting. I wonder if that is a bug in our default shadow file or
> some weired feature. Shouldn't this just be empty to disable password
> aging?

I think so - FWIW, I can't think of any reason why we would want
password aging for system accounts.

-- 
Gaetan


More information about the arch-dev-public mailing list