[SM-Discuss] create_account & create_group placement
Seth Alan Woolley
seth at positivism.org
Tue Aug 9 12:43:15 EDT 2005
I wasn't thinking of groupadd -- I assumed it did the same thing useradd
-- if we want to enforce groups to be similar, we'd need to patch some C
code -- the place that puts users > 1000 appears to be in the useradd
binary, not the adduser script.
Seth
On Tue, Aug 09, 2005 at 09:08:19AM -0700, David Brown wrote:
> Maybe this should be documented somewhere
> cause this is all new stuff to me... (probably more bugs for me)
>
> The adduser script does make UIDs >= 1000
> Is there a addgroup script that is similar, all I know of is groupadd
> which takes the next available group regardless of GID, which is how I
> got into the situation I'm in.
> It doesn't look like there exists one, maybe we could add a 'addgroup'
> script that would do something similar to adduser.
>
> - David Brown
>
> On 8/9/05, Seth Alan Woolley <seth at positivism.org> wrote:
> > On Tue, Aug 09, 2005 at 08:37:25AM -0700, Eric Sandall wrote:
> > >
> > > Admin created accounts are supposed to start at 500 (or 1000,
> > > depending on who you listen to) and system accounts (created by
> > > packages and such) stay below 500 (or 1000, ditto).
> >
> > The init system is patched to kill processes owned by UID >=1000 (it
> > used to be 100).
> >
> > New Users start at 1000. I suggest we set:
> >
> > 0 - 499 System Packages
> > 500 - 999 Local Administration
> > 1000 - .... Users
> >
> > And then we can expect the system and local administrator to be
> > responsible for killing their own created processes.
--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454 E082 99F0 69DC FDCE E733
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.ibiblio.org/pipermail/sm-discuss/attachments/20050809/910fc72c/attachment.bin
More information about the SM-Discuss
mailing list