14.04 - How to make sure that only the administrator can change passwords - Ask Ubuntu


how make sure non-administrator user can not change own password? want administrator that.

you can remove setuid bit passwd binary:

sudo chmod u-s /usr/bin/passwd 

although not recommended.

the /usr/bin/passwd binary setuid executable owner root, when passwd executed run root (so necessary changes in /etc/passwd, /etc/shadow files can done). removing setuid bit, have removed capability.


Comments

Popular posts from this blog

14.04 - Browser-process using high CPU - Ask Ubuntu

debian - Kali Linux - Debootstrap error Failed to determine codename for the release - Super User