is this normal?

[Mike Bristow]

On Thu, Apr 01, 2004 at 12:55:12PM +0100, Frank Shute wrote:
> http://www2.uk.freebsd.org/doc/en_US.ISO8859-1/books/faq/security.html#TOOR-ACCOUNT

(this page says that toor was created when bash was installed)

I'm not sure that that is correct:  version 1.1 of etc/master.passwd
has toor, and searching for log messages regarding the Resu Repus
makes me think that toor has been in FreeBSD's default install for
at least the last 10 years.

In fact, I think that FreeBSD inhreited it from 386BSD - it's in
the imported versiopn of the file (version 1.1.1.1)

There is also no mention of 'toor' in the cvs logs for shells/bash1
(which goes back to mid '94), which I'd expect at least when the
port stopped adding toor.  As there is no mention of that, and the port
doesn't add toor today, I don't think it ever did.

Perhaps the following patch should be applied (if I've guessed the
right file to patch):

--- book.sgml.old       Thu Apr  1 14:36:27 2004
+++ book.sgml   Thu Apr  1 14:38:54 2004
@@ -8888,9 +8888,8 @@
         <answer>
           <para>Do not worry. <username>toor</username> is an
             <quote>alternative</quote> superuser account (toor is root
-            spelt backwards). Previously it was created when the
-            &man.bash.1; shell was installed but now it is created by
-            default. It is intended to be used with a non-standard shell so
+            spelt backwards).
+            It is intended to be used with a non-standard shell so
             you do not have to change <username>root</username>'s default
             shell. This is important as shells which are not part of the
             base distribution (for example a shell installed from ports or


-- 
You dont have to be illiterate to use the Internet, but it help's.