src/etc/group, branch releng/5.1FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F5.12003-04-27T05:49:53Zxten isn't needed after tw is gone.2003-04-27T05:49:53ZWarner Loshimp@FreeBSD.org2003-04-27T05:49:53Zurn:sha1:e50dfdc9abb9eebc78636ee930ece699a837de52
Approved by: re@ (scottl)
Remove root from the 'guest' group: missed in a previous pass.2002-10-14T20:55:49ZRobert Watsonrwatson@FreeBSD.org2002-10-14T20:55:49Zurn:sha1:190a0059cf8db67e5141962e3dd9f60e3ca7f430
Spotted by: jhb
Remove root from the kmem, sys, tty, and staff groups in the default2002-10-13T17:00:37ZRobert Watsonrwatson@FreeBSD.org2002-10-13T17:00:37Zurn:sha1:975819b705740e27f0144529d4acdc37af673b13
configuration. Root privileges override DAC on local file systems and
therefore root does not generally need to be a member of a group to
access files owned by that group. In the NFS case, require explicit
authorization for root to have these privileges.
Leave root in operator for dump/restore broadcast reasons; leave root
in wheel until discrepencies in the "no users in wheel means any user
can su" policy are resolved (possibly indefinitely).
For consistency with other entries in group, don't put the daemon or2002-10-13T16:26:26ZRobert Watsonrwatson@FreeBSD.org2002-10-13T16:26:26Zurn:sha1:7b2c73b73d6e5984872cbb9613eb7cc08b0a4a4a
xten users in their groups explicitly--we pick that up from the gid
field in master.passwd.
Add an sshd user and group for the OpenSSH privilege separation code.2002-06-23T20:41:06ZDag-Erling Smørgravdes@FreeBSD.org2002-06-23T20:41:06Zurn:sha1:04b681a9997c2f9d5a5e3f7edfffeda6296121b3Add two new accounts/groups for sendmail:2001-11-17T21:24:45ZGregory Neil Shapirogshapiro@FreeBSD.org2001-11-17T21:24:45Zurn:sha1:ca8b9ed373148ac73fac8e7aa0936d2b5d937d3c
smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of
set-user-ID). This new user/group will be used for command line
submissions. UID/GID 25 is suggested in the sendmail documentation and has
been adopted by other operating systems such as OpenBSD and Solaris 9.
mailnull - The default value for DefaultUser is now set to the uid and gid
of the first existing user mailnull, sendmail, or daemon that has a
non-zero uid. If none of these exist, sendmail reverts back to the old
behavior of using uid 1 and gid 1. Currently FreeBSD uses daemon for
DefaultUser but I would prefer not to use an account used by other
programs, hence the addition of mailnull. UID/GID 26 has been chosen for
this user.
This was discussed on -arch on October 18-19, 2001.
MFC after: 1 week
Re-commit www:www2001-10-25T03:27:16ZAndrey A. Chernovache@FreeBSD.org2001-10-25T03:27:16Zurn:sha1:92277380c830a83e8513dd3c4a7146db334a7f02
If anybody wants to remove them for some reason, please consider "pop"
removing first.
Approved by: arch discussion from Oct 20
MFC after: 3 days
Back previous revision out until it has been discussed on -arch and2001-10-18T16:53:20ZSheldon Hearnsheldonh@FreeBSD.org2001-10-18T16:53:20Zurn:sha1:19aa5cdc3dbb8403a4fb2816b0ce7a861aa86bf6
motivated. Currently, it is under dispute.
Add www:www (80:80) for upcoming Apache changes2001-10-17T13:21:53ZAndrey A. Chernovache@FreeBSD.org2001-10-17T13:21:53Zurn:sha1:913b0e4e95ed417b1bceab436a26c8b8ae3da16d$Id$ -> $FreeBSD$1999-08-27T23:37:10ZPeter Wemmpeter@FreeBSD.org1999-08-27T23:37:10Zurn:sha1:9b7a44a60e11baaf94f68f81c4b30d26f31643b7