chfn tips — authorized GECOS/finger literacy

Snapshot

Tip checklist (authorized only)

1. Confirm you may run chfn on the lab host (syllabus box you own or were given access to).
2. Prefer documenting who / why / ticket before any write — never edit production GECOS without change control.
3. Record short factual notes; quote short Evidence (login, which fields changed — never real PII or passwords).
4. Optional: shell → chsh-tips; comment via usermod → usermod-tips.
5. Optional: NSS lookup → getent-tips.
6. Prefer lab-safe placeholder full names / rooms — never store real personal phone/address in binders.
7. Prefer disposable lab accounts for GECOS drills.
8. Stop at literacy — no attack or unauthorized identity-spoof cookbooks.

Allowed framing

• Classroom labs reviewing chfn / chfn -f on authorized disposable accounts.
• Binding short factual notes as Evidence (field intent + resulting getent — lab placeholders only).
• Documenting expected vs observed GECOS for authorized inventory notes.
• Comparing chfn ↔ chsh / usermod -c / getent peer tip pages under one binder.
• Testing restricted-field policies when the syllabus authorizes that drill.

Scope we will not cover

• No crack/pirate/keygen via chfn.
• No intentional unauthorized identity spoofing against foreign hosts.
• No secret-theft or PII harvesting against hosts you do not own.
• No cookbooks that plant misleading GECOS as social-engineering bait without authorization.

Beginner path (authorized only)

1. Obtain one syllabus-approved disposable lab host with util-linux / chfn installed.
2. Create a throwaway account via useradd-tips before any chfn drill.
3. With authorization, set a lab-safe full-name placeholder; quote getent passwd GECOS field as Evidence (no real PII).
4. Optional: shell with chsh-tips; broader modify with usermod-tips.
5. Stop at literacy — no attack or unauthorized GECOS-edit cookbooks.

Practical notes for authorized labs

• GECOS fields may include full name, room, work/home phone — use lab placeholders only.
• usermod -c is a related admin lever for the comment field — keep Evidence labels distinct from interactive chfn.
• Pair with getent-tips for before/after NSS Evidence.
• Never commit passwd dumps containing real PII to git — even for labs.
• Label lab-only GECOS clearly so they are not mistaken for production identity records.
• If chfn prompts for a password, treat that as local auth — never paste the password into notes.

FAQ-aligned refusals (quick)

• Foreign-host GECOS edits → refuse.
• Real-PII / social-engineering bait cookbooks → refuse.
• Attack framing → refuse.

For legal, authorized and educational use only.

FAQ

Sources