14.04 - How to make sure that only the administrator can change passwords - Ask Ubuntu
how make sure non-administrator user can not change own password? want administrator that.
you can remove setuid bit passwd binary:
sudo chmod u-s /usr/bin/passwd although not recommended.
the /usr/bin/passwd binary setuid executable owner root, when passwd executed run root (so necessary changes in /etc/passwd, /etc/shadow files can done). removing setuid bit, have removed capability.
Comments
Post a Comment