/etc/passwd file

[Jason Armitage]

On a trusted system, the root entry in the password file looks like this:

root::0:3::/:/sbin/sh

On all trusted other systems, it looks like this:

root:*:0:3::/:/sbin/sh

What impact is this causing, if any?

[Chartier Jerome]

Hi,

the first one seems to have no passwd and the second one is shadowed

Regards

JC

[Jose Mosquera]

Hi,

passwd file fields are splited by ":" character, second field correspond to password entry, in the first case root password is blank, second case is shadowed.

Rgds.

[Jason Armitage]

Thanks for your replies. Both of you agree that the in first example the root password is blank. However, when I su to root I have to enter a password, suggesting the password is not blank?

[Shannon Petry]

This just means that before conversion, the password was blank. A trusted system does not use /etc/passwd for authentication.

/etc/passwd on a trusted system is only used for some system calls like getuid, getgid, etc... As long as the shell, UID and GID are valid, your fine. Just note if/when you convert the system back to normal from trusted the root password will be blank.

Regards,
Shannon

[Jose Mosquera]

yeap,

On trusted systems the encrypted password will no longer reside in /etc/passwd. There will be in a new directory /tcb.

Rgds.