Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Sorcery] Re: [SM-Discuss] Re: [Bug 2129] opensshshouldcreate ssh user

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Dufflebunk <dufflebunk AT dufflebunk.homeip.net>
  • To: Ladislav Hagara <hgr AT vabo.cz>
  • Cc: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Sorcery] Re: [SM-Discuss] Re: [Bug 2129] opensshshouldcreate ssh user
  • Date: 24 Jan 2003 18:18:30 -0500

httpd servers might use nogroup as well. It is not handled specialy by
the kernel. It's just the group you use if you don't really want a
group.
sshd would only be able to access files if the files are readable by
nogroup. Generaly the group is set to root. Nothing much should be owned
by nogroup.

On Fri, 2003-01-24 at 10:51, Ladislav Hagara wrote:
> Now I looked at RedHat distro, there is a group sshd too.
> Is "nogroup" some special group, protected by linux kernel ?
> What if some another daemon uses group "nogroup" too?
> sshd could access to its files ?
>
> - lace -
>
> > It doesn't need it's own group... at least that was the last thing I
> > remmeber about the last time this problem was discussed... I think
> > there's even a bug for it, or perhaps it was on the ML...
> > It doesn't set any files to be owned by itself, so what use would a
> > group be to it?
> >
> >
> > > Thank you.
> > > And why does not sshd have its own group sshd ?
> > > Why group nogroup ?
> > > For example Mandrake uses group sshd too.
> > > - lace -
> > >
> > > > This was fixed last night (hmm did I remember to close the bug?). The
> > > > fix is to comment out line 41 of libgrimoire and add the line
> > > > 'nogroup:65534:' to /etc/sorcery/groups.
> > > >
> > > > On Fri, 2003-01-24 at 04:56, Ladislav Hagara wrote:
> > > > > Sorcery team, please, could you modify /etc/sorcery/accounts and
> > > > > /etc/sorcery/groups according to
> > > > > http://bugs.sourcemage.org/show_bug.cgi?id=2129#c3
> > > > >
> > > > > I installed latest iso http://download.sourcemage.org/iso/ :
> > > > > /etc/sorcery/accounts contains sshd:111:65534
> > > > > /etc/group contains nogroup with 65534
> > > > > /etc/sorcery/groups contains sudo:111:
> > > > >
> > > > > My suggestion:
> > > > > /etc/sorcery/accounts could contains sshd:111:111
> > > > > /etc/sorcery/groups could be modified, I would added group sshd:111:
> > > > > and modify group sudo:111: to for example sudo:114:
> > > > >
> > > > > Why does sshd use nogroup? I think sshd could have its own group
> > > > > sshd.
> > > > > Or modify create_account function to ignore nogroup in /etc/passwd.
>
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss





Archive powered by MHonArc 2.6.24.

Top of Page