search

prey / prey-node-client

Node.js client for the Prey anti-theft software.
http://preyproject.com
GNU General Public License v3.0
330 stars 76 forks source link

login shell of prey user in ubuntu package better be /bin/false or /usr/sbin/nlogin #74

Closed solsticedhiver closed 9 years ago

solsticedhiver commented 9 years ago

hi in ubuntu package from prey site, a prey user and a prey group is created when the package is installed but the login shell of the prey user is /bin/bash:

$ grep prey /etc/passwd
prey:x:999:999::/home/prey:/bin/bash

as a security measure, it could be better to use /bin/false or /usr/sbin/nologin As I understand, prey daemon does not need a login shell (?)

mauricioschneider commented 9 years ago

Hi @solsticedhiver, thanks for your feedback!