Hi, it´s nice to know that my subject is still an issue :))))) Anyway, let's see, sorry for the intrusion here, the thanks can go to Tim Haynes <[EMAIL PROTECTED]> since he helped me out on this issue :))))) Cheers Tim. Anyway, what I found out was that perl -npi.bak -e 's/^root:[^:]*:/root:pants/o' /etc/shadow changes and sets the root password allright, of course substituting "pants" for your shadowed password, the only problem was that it didn´t respect the rest of the line, so instead of having the correct permissions, you got a lot of ::: . Anyway, the correct line should be : perl -npi.bak -e 's/^root:[^:]*:(.*)$/root:pants:\1/o' /etc/shadow which Tim kindly passed over to me. Then put this in the crontab.....
Thanks -- ------------------------------------------------------------- Neil D. Roberts ; Administrador De Sistemas; <[EMAIL PROTECTED]> Lander World Communications Server S.L. / Integra España S.A. Calle Rufino Gonzalez, Nº15 - 4ª Planta, Madrid, España 28037 Telefonos : 917.897.710 ; 902.363.363 Fax : 913.042.044 Mensatel Beeper: Nº 940.331.331 ; Codigo Del Cliente : #NR10 PGP Print: 6228 6EEE C604 431A 70A9 84B7 E327 9CAF E59A 2709 ------------------------------------------------------------- Become a programmer and never see the world!!! Peter Cordes wrote: > On Thu, Mar 23, 2000 at 11:04:17AM +0000, Tim Haynes wrote: > > OTOH it's only going to take a wee fraction of a second to happen and it's > > not > > as though everyone logs every process that happens... > > They might well do so if they knew the root password was getting changed by > a cron job! They would be looking for the path of the script/program that > was doing it, and would probably fall out of their chair when they saw the > encrypted root password right there. OTOH, if you've got MD5 passwords, > it won't help them unless you've got a dictionary-attack succeptible > password. Still, it's a bad thing. > > I'd make a script in /usr/local/sbin > #!/usr/bin/perl -npi.bak /etc/shadow > s/^root:[^:]*:/root:pants/o > > (I think that works, I'm a perl beginner... I don't know though, complex > command lines in #! lines usually don't work with other things :( ) > > -- > #define X(x,y) x##y > DUPS Secretary ; http://is2.dal.ca/~dups/ > Peter Cordes ; e-mail: X([EMAIL PROTECTED] , dal.ca) > > "The gods confound the man who first found out how to distinguish the hours! > Confound him, too, who in this place set up a sundial, to cut and hack > my day so wretchedly into small pieces!" -- Plautus, 200 BCE > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
