From nobody Thu Dec 05 09:02:48 2024
X-Original-To: questions@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Y3pM619Cyz5gBLW
	for <questions@mlmmj.nyi.freebsd.org>; Thu, 05 Dec 2024 09:02:58 +0000 (UTC)
	(envelope-from freebsd@qeng-ho.org)
Received: from mailout.qeng-ho.org (mailout.qeng-ho.org [217.155.128.244])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(Client did not present a certificate)
	by mx1.freebsd.org (Postfix) with ESMTPS id 4Y3pM5679Dz4XWt
	for <questions@freebsd.org>; Thu,  5 Dec 2024 09:02:57 +0000 (UTC)
	(envelope-from freebsd@qeng-ho.org)
Authentication-Results: mx1.freebsd.org;
	none
Received: from [IPV6:2a02:8010:64c9:1::2] (unknown [IPv6:2a02:8010:64c9:1::2])
	by mailout.qeng-ho.org (Postfix) with ESMTP id DDD7612A778;
	Thu, 05 Dec 2024 09:02:48 +0000 (GMT)
Message-ID: <29d25763-12a2-40c9-b5a5-33950c7fd9d5@qeng-ho.org>
Date: Thu, 5 Dec 2024 09:02:48 +0000
List-Id: User questions <freebsd-questions.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-questions
List-Help: <mailto:questions+help@freebsd.org>
List-Post: <mailto:questions@freebsd.org>
List-Subscribe: <mailto:questions+subscribe@freebsd.org>
List-Unsubscribe: <mailto:questions+unsubscribe@freebsd.org>
X-BeenThere: freebsd-questions@freebsd.org
Sender: owner-freebsd-questions@FreeBSD.org
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Do we need both /nonexistent and /var/empty in /etc/passwd?
To: Dewayne Geraghty <dewayne@heuristicsystems.com.au>,
 Paul Procacci <pprocacci@gmail.com>
Cc: questions@freebsd.org
References: <41641e69-c7b4-4558-8d2c-e6f70906c893@heuristicsystems.com.au>
 <CAFbbPugs=rkOJHm4y_6gpUsP2B+8GBqBqd_fYZumE344DqNe6g@mail.gmail.com>
 <9c3177d2-9b98-4049-b775-0d969d604b89@heuristicsystems.com.au>
Content-Language: en-GB
From: Arthur Chance <freebsd@qeng-ho.org>
In-Reply-To: <9c3177d2-9b98-4049-b775-0d969d604b89@heuristicsystems.com.au>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:13037, ipnet:217.155.0.0/16, country:GB]
X-Rspamd-Queue-Id: 4Y3pM5679Dz4XWt
X-Spamd-Bar: ----

On 05/12/2024 02:03, Dewayne Geraghty wrote:
>> You need to read hier(7).
>>
>> ;)
>>
>> ~Paul
>>
> 
> Thanks for the pointer.  I'd forgotten about that page <headslap>.
> 
> As I suspect its historical, I've deleted /var/empty and restarting
> services to see if its actually needed. It'll take a few days but so
> far, no impact.  If all ok, then I'll just sed /etc/master.passwd.
> Cheers.
> 

Grepping the source (REL-13 as that's what I'm on) shows that sshd uses
/var/empty as part of its privilege separation and fails if it can't
chroot there.

-- 
Although not designed for computation, PIO is quite likely Turing
complete, provided a long enough piece of tape can be found. It is
conjectured that it could run DOOM, given a sufficiently high clock
speed.  — The Raspberry Pi Pico datasheet on its PIO capability.