Newsgroups: comp.unix.admin Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!casbah.acns.nwu.edu!navarra From: navarra@casbah.acns.nwu.edu (John Navarra) Subject: Re: chfn...can I?? Message-ID: <1991Apr4.110459.26216@casbah.acns.nwu.edu> Organization: Northwestern University References: <1991Apr3.161841.26270@ioe.lon.ac.uk> Date: Thu, 4 Apr 1991 11:04:59 GMT Lines: 39 In article <1991Apr3.161841.26270@ioe.lon.ac.uk> andrew@uxm.sm.ucl.ac.uk writes: >In shahryar@sfsuvax1.SFSU.EDU (Persian Nightmare) writes: > >>In chfn, could I turn off the ability to change the REAL name unless done >>bye a superuser?? How is it possible?? > >This may be a bit difficult without source code changes. You might be able to >disable the chfn command entirely just by changing its permissions. Note, >however, on some systems that chfn, chsh and passwd are all links to the same >binary, so a user might still be able to use passwd -f if you disable chfn. Funny that I am seeing this subject cropping up everywhere. For some reason people don't like bogus fullnames. Well first off if you want to completely rid yourself of this fullname option you are going to have to do more than change the perms on chfn. As it has been pointed out, there is the esoteric passwd -f option. So the first thing you have to do is edit the passwd.c file (if you don't have it, I know it is ftpable from somewhere.) and take out the -f option -- since you can't disable passwd! BUT even that is not enough. Some of the more ingenious users might figure this one out: ln -s /bin/chsh ~/chfn !!!!!! Now you can execute chfn from your own directory and change your fullname! So, you are going to have to change some perms on chsh too! Now our sysadmin fixed passwd.c but not chsh (but is it worth all this trouble? Only a few users on the system are going to know about this anyway.) > >-- >Andrew Dawson, Computer Centre, University College London, Gower Street, >London WC1E 6BT, England. >JANET: ccaaand@uk.ac.ucl EARN/BITNET: ccaaand@ucl.ac.uk >INTERNET: ccaaand%ucl.ac.uk@nsfnet-relay.ac.uk UUCP: ...!ukc!ucl.ac.uk!ccaaand -- From the Lab of the MaD ScIenTiST: navarra@casbah.acns.nwu.edu