Gentoo Archives: gentoo-security

From: Andrew Gaffney <agaffney@×××××××××××.com>
To: Mike Frysinger <vapier@g.o>
Cc: gentoo-security@l.g.o
Subject: Re: [gentoo-security] new ssh worm?
Date: Wed, 28 Jul 2004 01:12:00
Message-Id: 4106FC22.9070705@skylineaero.com
In Reply to: Re: [gentoo-security] new ssh worm? by Mike Frysinger
1 Mike Frysinger wrote:
2 > On Tuesday 27 July 2004 09:02 pm, Ard Righ wrote:
3 >
4 >>On Wed, 2004-07-28 at 10:33, Marc-Eric Dupuis wrote:
5 >>
6 >>>I have a guest account on my fresh gentoo install and the only server
7 >>>here is sshd:
8 >>>
9 >>>baal@artsucks baal $ grep guest /etc/passwd
10 >>>guest:x:405:100:guest:/dev/null:/dev/null
11 >>
12 >> Perhaps we should 'bug' it, and see what the Dev comments come back as
13 >>? I was under the impression that 'guest' was a legacy account for
14 >>Samba, since SMB users try the 'guest' share, while just browsing
15 >>between machines ?
16 >
17 > many baselayout system accounts wont get trimmed until GLEP 27 is pushed
18 > through
19 >
20 > in this case, guest would get moved to samba once we see GLEP 27 added
21
22 Unless the ebuild changes the default guest user, Samba 3.x defaults to 'nobody'
23 for the guest user if one is not defined in the smb.conf. Unless there is
24 something out there that really needs it, it should probably just be removed.
25
26 --
27 Andrew Gaffney
28 Network Administrator
29 Skyline Aeronautics, LLC.
30 636-357-1548
31
32
33 --
34 gentoo-security@g.o mailing list