Skip to content

Comment on Linux Sysadmin/DevOps Interview Questionsparent

Comments

/sbin/nologin actually does some cool logging stuff that /bin/false doesn't, which is why the distros generally use it.

Cool stuff as in display a message that the account cannot login, which leads to brute-force service, process or other stuff system user names.

Failed logins will be logged either way.

I think still could go with the output of `type -P false`. Unless the project requests that feature of messaging to the (forbidden) user, its forbidden logins.

It could work even on embedded devices having only 'false' available.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.