Re: Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Daniel Ouellet
Hi Stuart, The counting to 13 was actually a sarcastic joke. (: But thanks never the less. Daniel On 7/1/18 5:54 PM, Stuart Henderson wrote: > On 2018-07-01, Daniel Ouellet wrote: >> Ha the old man page. >> >> Not good to read to quickly. (: >> >> Sorry for the noise. >> >> Now I just need t

Re: Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Stuart Henderson
On 2018-07-01, Daniel Ouellet wrote: > Ha the old man page. > > Not good to read to quickly. (: > > Sorry for the noise. > > Now I just need to learn to count up to 13. Edit in vi, '13i*^[' or '13i*'

Re: Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Mohamed Fouad
Set VERBOSESTATUS to 0 in /etc/daily.local Source: absolute openbsd 2nd edition, chapter 15 "System Maintenance" Havent done it myself but I hope its a good clue! On Sun, 1 Jul 2018, 8:47 pm Remco, wrote: > Op 07/01/18 om 19:22 schreef Daniel Ouellet: > > I find this annoying and sometime I ov

Re: Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Daniel Ouellet
Ha the old man page. Not good to read to quickly. (: Sorry for the noise. Now I just need to learn to count up to 13. Daniel By convention, accounts that are not intended to be logged in to (e.g. bin, daemon, sshd) only contain a single asterisk in the password field. Note that

Re: Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Remco
Op 07/01/18 om 19:22 schreef Daniel Ouellet: I find this annoying and sometime I over look this because I always get the example: == Running security(8): Checking the /etc/master.passwd file: Login share is off but still has a valid shell and alternate access files in home

Re: Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Stefan Johnson
>From passwd(5) : Similarly, login accounts not allowing password authentication but allowing other authentication methods, for example public key authentication, conventionally have 13 asterisks in the password field. I believe security(8) will stop barking about these accounts if you set the enc

Daily insecurity output on valid users using key with valid shell and without password.

2018-07-01 Thread Daniel Ouellet
I find this annoying and sometime I over look this because I always get the example: == Running security(8): Checking the /etc/master.passwd file: Login share is off but still has a valid shell and alternate access files in home directory are still readable. Login xxx is off