Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] create_account & create_group placement

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: David Brown <dmlb2000 AT gmail.com>
  • Cc: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] create_account & create_group placement
  • Date: Tue, 9 Aug 2005 09:43:15 -0700

I wasn't thinking of groupadd -- I assumed it did the same thing useradd
-- if we want to enforce groups to be similar, we'd need to patch some C
code -- the place that puts users > 1000 appears to be in the useradd
binary, not the adduser script.

Seth

On Tue, Aug 09, 2005 at 09:08:19AM -0700, David Brown wrote:
> Maybe this should be documented somewhere
> cause this is all new stuff to me... (probably more bugs for me)
>
> The adduser script does make UIDs >= 1000
> Is there a addgroup script that is similar, all I know of is groupadd
> which takes the next available group regardless of GID, which is how I
> got into the situation I'm in.
> It doesn't look like there exists one, maybe we could add a 'addgroup'
> script that would do something similar to adduser.
>
> - David Brown
>
> On 8/9/05, Seth Alan Woolley <seth AT positivism.org> wrote:
> > On Tue, Aug 09, 2005 at 08:37:25AM -0700, Eric Sandall wrote:
> > >
> > > Admin created accounts are supposed to start at 500 (or 1000,
> > > depending on who you listen to) and system accounts (created by
> > > packages and such) stay below 500 (or 1000, ditto).
> >
> > The init system is patched to kill processes owned by UID >=1000 (it
> > used to be 100).
> >
> > New Users start at 1000. I suggest we set:
> >
> > 0 - 499 System Packages
> > 500 - 999 Local Administration
> > 1000 - .... Users
> >
> > And then we can expect the system and local administrator to be
> > responsible for killing their own created processes.

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454 E082 99F0 69DC FDCE E733

Attachment: pgpaLqP2R0lLF.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page