Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I'm messing around with Tiger security audits on my CentOS box, ensuring the server is fit for being online, well as close as it can get anyway.

I noticed a warning about the user nobody having / as a home directory. I just can't figure out which directory it should "live in" so to speak. So where shall I put this fella? And how about ncsd now we're at it?

I guess the questions really are: What is nobody and ncsd for? Which security risk does it impose for those users to have root set as their home directory? In an optimal environment, where would their home directories be?

share|improve this question
    
I think that generally each operating system or operating system distribution has its own pesudo-standard for what the home directories of various system users are. For example, on Debian it's /nonexistent. What is the home directory of the nobody user on a fresh install of the operating system you are using? –  Celada May 8 '13 at 16:56
1  
On my distro (Gentoo), it's /var/empty. And it does exist and contains files. Strange... –  lgeorget May 8 '13 at 17:00
1  
I doubt the distro creators intended for those logons to be usable. –  Tim May 8 '13 at 17:08
    
On Crunchbang and Unbuntu it is /nonexistent and I think if you create a directory with that name you deserve yourself. –  msw May 8 '13 at 17:26
    
Where are home directories listed? –  Faheem Mitha May 8 '13 at 17:32
show 6 more comments

1 Answer 1

up vote 1 down vote accepted

[EDIT]: I misunderstud the question, I rewrite a more appropriate ansver here

I do not know Tiger security, but I agree that the user nobody is mean to have NO homedir, NO right over any subdir at all and is mean to really to have NO shell at all (and to do never properly do a 'login').

But the actual settings (in /etc/passwd) is different for differents Linux distros and BSDs and *unix.

I had checked using this command :

$ grep nobody /etc/passwd

on RedHat 5.2 (that is the same as a Centos), and I find :

nobody:x:99:99:Nobody:/:/sbin/nologin

so probably '/' this is the standard for RedHat/Centos.

I had checked on Ubuntu 10.04 :

nobody:x:65534:65534:nobody:/nonexistent:/bin/sh

(and '/nonexistent' does not exist)

and on Mac OSX 10.4 Tiger (that is a BDS derivate) :

nobody:*:-2:-2:Unprivileged User:/var/empty:/usr/bin/false

(and '/var/empty' exists and is empty)

My guest is that Tiger security does not like the standard setting on RedHat/Centos. Probably you can safely ignore this warning or you can edit /etc/passwd setting nobody home to and empty dir or to a non-existent dir to suddisfly Tiger security check.

share|improve this answer
    
No, Tiger security: nongnu.org/tiger –  Time Sheep May 10 '13 at 22:35
    
@Time Sheep: ok, but on that kind of *nix are you getting this warning ? Different distros setup nobody user in different ways. The 'grep nobody /etc/passwd' will tell you how. I suggest you to edit you original question and specify you are talking about Tiger security. –  DavAlPi May 11 '13 at 6:25
    
I did for a fact write I was looking at some Tiger Security audits in the original question, so there is no need to edit it. I'm working on CentOS. It doesn't really matter where it is, but I guess it's supposed to be somewhere safe, because as far as I know "nobody" is used as a user without privileges etc. –  Time Sheep May 11 '13 at 15:03
1  
@Time Sheep: yes, my fault, I misundestand the question. I'll edit my answer. –  DavAlPi May 13 '13 at 8:42
    
Thanks for your thorough answer :) –  Time Sheep May 14 '13 at 10:26
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.