Disabling login access to account, nologin,false or null?

humbletech99 · Veteran Joined: 26 May 2005 Posts: 1229 Location: London

which is better for security in order to disable login to an account, setting the shell to false, nologin or null?

is there any difference?
_________________
The Human Equation:

value(geeks) > value(mundanes)

erik258 · Posted: Fri Mar 16, 2007 10:25 pm Post subject:

/dev/null can't execute and there's nothing there and that fact isn't likely to change, so that seems like the best. The other two are just programs, I guess they could be edited to a greater extent than /dev/null can be. however i bet they to a better job insofar as they have not been compromised at least.

but in reality i think any of them would work fine. /dev/null will belch out "cannot execute binary file" sometimes maybe.
_________________
Configuring a Firewall? Try my iptables configuration
LinuxCommando.com is my blog for linux-related scraps and tidbits. Stop by for a visit!