From nobody Thu Sep 23 19:30:40 2021 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id B5DED17CE1E0 for ; Thu, 23 Sep 2021 19:30:55 +0000 (UTC) (envelope-from tim@xinuos.com) Received: from zhost.uxsglobal.com (zhost.xinuos.com [132.147.224.105]) by mx1.freebsd.org (Postfix) with ESMTP id 4HFldB6qv1z3vFY for ; Thu, 23 Sep 2021 19:30:54 +0000 (UTC) (envelope-from tim@xinuos.com) Received: from zhost.uxsglobal.com (localhost [127.0.0.1]) by zhost.uxsglobal.com (Postfix) with ESMTPS id CECB018D3689 for ; Thu, 23 Sep 2021 14:30:46 -0500 (CDT) Received: from localhost (localhost [127.0.0.1]) by zhost.uxsglobal.com (Postfix) with ESMTP id B6CED18D36BC for ; Thu, 23 Sep 2021 14:30:46 -0500 (CDT) DKIM-Filter: OpenDKIM Filter v2.9.2 zhost.uxsglobal.com B6CED18D36BC DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xinuos.com; s=710E410E-A6C0-11E6-9C55-A8275FB0EC07; t=1632425446; bh=t+2TnIcC12ID/9Nowl0l2njPk4sk8mp3sdKcXkxvPD0=; h=Subject:To:From:Message-ID:Date:MIME-Version:Content-Type: Content-Transfer-Encoding; b=oa7lcDQt3xwLjJad0oRZXreTGOUa7ILUZ1PPVzC1bxDwCiYusLKMB/S5jETrWSdoM K7xkCW8ncS+rLS0rMvr6oj1y+/swU0gCDIISPHmnBd538lxwMUWnWP31Ol7mIyLLN/ ZHLwok2CCBfHc0ukjzHep4KB7AoZ5J+024x4PgbY= Received: from zhost.uxsglobal.com ([127.0.0.1]) by localhost (zhost.uxsglobalhost.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id luCMwlc8X8Co for ; Thu, 23 Sep 2021 14:30:46 -0500 (CDT) Received: from mac-mini02.willits.xinuos.com (ext139.multitalents.net [173.164.249.139]) by zhost.uxsglobal.com (Postfix) with ESMTPSA id 74C7A18D3689 for ; Thu, 23 Sep 2021 14:30:46 -0500 (CDT) Subject: Re: [HEADSUP] making /bin/sh the default shell for root To: freebsd-current@freebsd.org References: <202109221552.18MFqsTS050409@gndrsh.dnsmgr.net> From: Tim Rice Message-ID: Date: Thu, 23 Sep 2021 12:30:40 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:78.0) Gecko/20100101 Thunderbird/78.14.0 List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org MIME-Version: 1.0 In-Reply-To: <202109221552.18MFqsTS050409@gndrsh.dnsmgr.net> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Content-Language: en-US X-WatchGuard-AntiVirus: part scanned. clean action=allow X-Rspamd-Queue-Id: 4HFldB6qv1z3vFY X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=xinuos.com header.s=710E410E-A6C0-11E6-9C55-A8275FB0EC07 header.b=oa7lcDQt; dmarc=none; spf=pass (mx1.freebsd.org: domain of tim@xinuos.com designates 132.147.224.105 as permitted sender) smtp.mailfrom=tim@xinuos.com X-Spamd-Result: default: False [-1.75 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; RCVD_COUNT_FIVE(0.00)[5]; R_DKIM_ALLOW(-0.20)[xinuos.com:s=710E410E-A6C0-11E6-9C55-A8275FB0EC07]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:132.147.224.105]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000]; DMARC_NA(0.00)[xinuos.com: no valid DMARC record]; NEURAL_SPAM_SHORT(0.65)[0.647]; DKIM_TRACE(0.00)[xinuos.com:+]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:36489, ipnet:132.147.224.0/20, country:US]; MID_RHS_MATCH_FROM(0.00)[] X-ThisMailContainsUnwantedMimeParts: N On 9/22/21 8:52 AM, Rodney W. Grimes wrote: >> On Wed, Sep 22, 2021 at 08:34:58AM -0700, John Baldwin wrote: >>> I think this is fine. I would also be fine with either removing 'toor' from the >>> default password file or just leaving it as-is for POLA. (I would probably >>> prefer removing it outright.) >> HardenedBSD recently removed toor. No one has complained (yet?). A >> small Twitter poll[0] showed that 85% of people who responded do not >> use toor. > A truely disastisified customer does not complain, they simply > go some place else for there products. Be carefull in what you > believe silence to be saying. I do not see csh as root's shell as a pain point. The #1 pain point on FreeBSD if you are used to various flavors of linux, Solaris, UnixWare, etc. is ps(1) not having POSIX style arguments. -- Tim Rice tim.rice@xinuos.com