[Bug 216813] Re: Lighttpd enables a login shell for user www-data

[Launchpad Bug Tracker]

** Branch linked: lp:debian/base-passwd

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to base-passwd in Ubuntu.
https://bugs.launchpad.net/bugs/216813

Title:
  Lighttpd enables a login shell for user www-data

Status in “base-passwd” package in Ubuntu:
  Triaged
Status in “lighttpd” package in Ubuntu:
  Invalid

Bug description:
  Binary package hint: lighttpd

  I'm using Ubuntu 7.10/amd64, this report regards lighttpd 1.4.18-1ubuntu1.3.
  The package creates the user www-data, which lighttpd is run as.
  However, the www-data user, by default, has the login shell /bin/sh.
  I can see no reason why this user has a valid login shell, instead of /bin/false.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/base-passwd/+bug/216813/+subscriptions