Public SourceMage Discussion List

[Seth Alan Woolley <seth AT positivism.org>]

I wasn't thinking of groupadd -- I assumed it did the same thing useradd 
-- if we want to enforce groups to be similar, we'd need to patch some C 
code -- the place that puts users > 1000 appears to be in the useradd 
binary, not the adduser script.

Seth

On Tue, Aug 09, 2005 at 09:08:19AM -0700, David Brown wrote:
> Maybe this should be documented somewhere
> cause this is all new stuff to me... (probably more bugs for me)
> 
> The adduser script does make UIDs >= 1000
> Is there a addgroup script that is similar, all I know of is groupadd
> which takes the next available group regardless of GID, which is how I
> got into the situation I'm in.
> It doesn't look like there exists one, maybe we could add a 'addgroup'
> script that would do something similar to adduser.
> 
> - David Brown
> 
> On 8/9/05, Seth Alan Woolley <seth AT positivism.org> wrote:
> > On Tue, Aug 09, 2005 at 08:37:25AM -0700, Eric Sandall wrote:
> > >
> > > Admin created accounts are supposed to start at 500 (or 1000,
> > > depending on who you listen to) and system accounts (created by
> > > packages and such) stay below 500 (or 1000, ditto).
> > 
> > The init system is patched to kill processes owned by UID >=1000 (it
> > used to be 100).
> > 
> > New Users start at 1000.  I suggest we set:
> > 
> >    0 -  499 System Packages
> >  500 -  999 Local Administration
> > 1000 - .... Users
> > 
> > And then we can expect the system and local administrator to be
> > responsible for killing their own created processes.

-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454  E082 99F0 69DC FDCE E733

Attachment: pgpaLqP2R0lLF.pgp
Description: PGP signature