upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-02-22 17:32:57 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/etc/master.passwd

22 lines
1.1 KiB
Text
Raw Normal View History

Add/adjust some $FreeBSD$ tags. Noted by: Doug <Doug@gorean.org>
1999-09-13 13:09:08 -04:00
# $FreeBSD$
#
Removed extranious names from master.passwd file, changed root and toor to be in group 0 (was group 10). Changed operator to be in group 20, was 28.
1993-07-19 14:52:51 -04:00
root::0:0::0:0:Charlie &:/root:/bin/csh
A real good idea... >From: "Chris G. Demetriou" <cgd@sun-lamp.cs.berkeley.edu> Update of /b/source/CVS/src/etc In directory sun-lamp.cs.berkeley.edu:/usr/src/etc Modified Files: master.passwd Log Message: disable toor by default
1994-02-08 20:57:37 -05:00
toor:*:0:0::0:0:Bourne-again Superuser:/root:
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no>
1998-05-24 23:19:37 -04:00
daemon:*:1:1::0:0:Owner of many system processes:/root:/sbin/nologin
Use /sbin/nologin as shell for operator Replace non-existent directory for operator with / Supply by default operator with non-existent but can be created directory and /bin/csh is kinda security risk
1998-12-02 10:17:10 -05:00
operator:*:2:5::0:0:System &:/:/sbin/nologin
Tidy up gecos field for `bin'.
2002-01-29 09:00:03 -05:00
bin:*:3:7::0:0:Binaries Commands and Source:/:/sbin/nologin
Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid.
1998-12-01 16:19:49 -05:00
tty:*:4:65533::0:0:Tty Sandbox:/:/sbin/nologin
kmem:*:5:65533::0:0:KMem Sandbox:/:/sbin/nologin
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no>
1998-05-24 23:19:37 -04:00
games:*:7:13::0:0:Games pseudo-user:/usr/games:/sbin/nologin
news:*:8:8::0:0:News Subsystem:/:/sbin/nologin
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/sbin/nologin
Previous commit was just a tad too hasty, the sshd peudo-user's home directory should be /var/empty.
2002-06-23 16:46:44 -04:00
sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/sbin/nologin
Add two new accounts/groups for sendmail: smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of set-user-ID). This new user/group will be used for command line submissions. UID/GID 25 is suggested in the sendmail documentation and has been adopted by other operating systems such as OpenBSD and Solaris 9. mailnull - The default value for DefaultUser is now set to the uid and gid of the first existing user mailnull, sendmail, or daemon that has a non-zero uid. If none of these exist, sendmail reverts back to the old behavior of using uid 1 and gid 1. Currently FreeBSD uses daemon for DefaultUser but I would prefer not to use an account used by other programs, hence the addition of mailnull. UID/GID 26 has been chosen for this user. This was discussed on -arch on October 18-19, 2001. MFC after: 1 week
2001-11-17 16:24:45 -05:00
smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/sbin/nologin
mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/sbin/nologin
Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid.
1998-12-01 16:19:49 -05:00
bind:*:53:53::0:0:Bind Sandbox:/:/sbin/nologin
Link pf to the build and install: This adds the former ports registered groups: proxy and authpf as well as the proxy user. Make sure to run mergemaster -p in oder to complete make installworld without errors. This also provides the passive OS fingerprints from OpenBSD (pf.os) and an example pf.conf. For those who want to go without pf; it provides a NO_PF knob to make.conf. __FreeBSD_version will be bumped soon to reflect this and to be able to change ports accordingly. Approved by: bms(mentor)
2004-03-08 17:03:29 -05:00
proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/sbin/nologin
Intruduce new group for uucp, gid 66
1994-05-31 00:36:30 -04:00
uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no>
1998-05-24 23:19:37 -04:00
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/sbin/nologin
Re-commit www:www If anybody wants to remove them for some reason, please consider "pop" removing first. Approved by: arch discussion from Oct 20 MFC after: 3 days
2001-10-24 23:27:16 -04:00
www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/sbin/nologin
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no>
1998-05-24 23:19:37 -04:00
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/sbin/nologin
Reference in a new issue Copy permalink