Re: Permissions on NFS mounts

From	Andrei POPESCU <andreimpopescu@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: Permissions on NFS mounts
Date	2020-12-10 11:10 +0100
Message-ID	<Bkr3A-6Fd-7@gated-at.bofh.it> (permalink)
References	<BkepH-7fZ-3@gated-at.bofh.it> <BkeJ3-7n0-1@gated-at.bofh.it> <Bkqhb-69W-5@gated-at.bofh.it> <BkqKe-6jt-13@gated-at.bofh.it> <BkqTU-6mH-13@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Jo, 10 dec 20, 12:52:56, Reco wrote:
> On Thu, Dec 10, 2020 at 11:46:02AM +0200, Andrei POPESCU wrote:
> > 
> > passwd -l/--lock <username>
> 
> sudo -u <locked_user> /bin/bash -i
> 
> That little trick defeats "locked" account status, an absence of a
> password and even /usr/sbin/nologin set as a default shell.

With sudo access one can also unlock the account as well, so how is this 
relevant?

As I already hinted, the 'locked' status has another limitation that may 
or may not be desired, depending on use case.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

Thread

Permissions on NFS mounts Paul M Foster <paulf@quillandmouse.com> - 2020-12-09 21:40 +0100
  Re: Permissions on NFS mounts Dan Ritter <dsr@randomstring.org> - 2020-12-09 22:00 +0100
    Re: Permissions on NFS mounts Mark Fletcher <mark27q1@gmail.com> - 2020-12-10 10:20 +0100
      Re: Permissions on NFS mounts Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-10 10:50 +0100
        Re: Permissions on NFS mounts Reco <recoverym4n@enotuniq.net> - 2020-12-10 11:00 +0100
          Re: Permissions on NFS mounts Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-10 11:10 +0100
            Re: Permissions on NFS mounts Reco <recoverym4n@enotuniq.net> - 2020-12-10 11:40 +0100
              Re: Permissions on NFS mounts Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-10 14:40 +0100
                Re: Permissions on NFS mounts Reco <recoverym4n@enotuniq.net> - 2020-12-10 14:50 +0100
                Re: Permissions on NFS mounts David Wright <deblis@lionunicorn.co.uk> - 2020-12-10 16:40 +0100
                Re: Permissions on NFS mounts Tixy <tixy@yxit.co.uk> - 2020-12-10 16:40 +0100
                Re: Permissions on NFS mounts Greg Wooledge <wooledg@eeg.ccf.org> - 2020-12-10 16:50 +0100
                Re: Permissions on NFS mounts Michael Stone <mstone@debian.org> - 2020-12-10 18:20 +0100
                Re: Permissions on NFS mounts Michael Stone <mstone@debian.org> - 2020-12-10 18:30 +0100
      Re: Permissions on NFS mounts Reco <recoverym4n@enotuniq.net> - 2020-12-10 11:00 +0100
      Re: Permissions on NFS mounts Darac Marjal <mailinglist@darac.org.uk> - 2020-12-10 13:00 +0100
  Re: Permissions on NFS mounts Michael Stone <mstone@debian.org> - 2020-12-10 18:00 +0100

csiph-web