Modify

Opened 7 years ago

Closed 7 years ago

#8178 closed defect (fixed)

Please provide useradd/userdel commands.

Reported by: User294 Owned by: developers
Priority: normal Milestone: Backfire 10.03.1
Component: base system Version: Backfire 10.03.1 RC3
Keywords: Cc: t3st3r@…

Description

Right now it's inconvenient to create new users in OpenWRT. And I prefer to run, say, torrent client and some other daemons with least possible privileges, etc. Running each and every daemon as root IMHO really sucks (from security point of view). Just one bug in daemon and attacker can completely PWN my router and then for example redirect/sniff my traffic, etc. Which is a BAD thing. I would rather prefer that x4x0r would rather remain restricted under user account with ability to only do a minor damage (only affecting hacked daemon).

Neither BusyBox includes useradd/userdel commands, nor there is package for coreutils with this command. It's still possible to add users and groups via editing appropriate files, but should I mention that it's inconvenient to do this manually instead of using these commands?

Attachments (0)

Change History (3)

comment:1 Changed 7 years ago by anonymous

You can always build by yourself a busybox binary which has these commands enabled.

comment:2 Changed 7 years ago by User294

Sure, I can. But I see no reasons why there should be no such coreutils package, for example. There is dozen od other utils... except those, for some reason. Should I admit that installing package is faster/easier than rebuilding image?

comment:3 Changed 7 years ago by jow

  • Resolution set to fixed
  • Status changed from new to closed

Shadow utils added in r23893.

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.