Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
The default user list
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
gentleman
Tux's lil' helper
Tux's lil' helper


Joined: 02 Dec 2005
Posts: 140
Location: Germany, Paderborn

PostPosted: Fri Jan 11, 2008 8:42 am    Post subject: The default user list Reply with quote

Hey folk,

I looked at the /etc/passwd to get a list of users which are not needed anymore and can be deleted for security reasons. I wondered why there are so many accounts which are (yet seems like) not used.
Okay, I say the bin-user is probarbly required to execute some binaries, but which??

And:

  • daemon
  • adm
  • lp (printer?)
  • sync (portage?)
  • mail
  • news
  • uucp
  • operator
  • postmaster
  • smmsp


There are many of which I have no idea what they are ever used for. All of them have no results on:
Code:
find / -user <username>

I would like to get some information of a developer, too, who can give advice why the users are implemented by default.

Greetings
_________________
Everything works, you just have to do it correctly.
Back to top
View user's profile Send private message
desultory
Bodhisattva
Bodhisattva


Joined: 04 Nov 2005
Posts: 9410

PostPosted: Fri Jan 11, 2008 9:28 am    Post subject: Reply with quote

Moved from Installing Gentoo to Networking & Security.
Back to top
View user's profile Send private message
RoundsToZero
Guru
Guru


Joined: 17 Nov 2003
Posts: 478
Location: New York, NY

PostPosted: Sat Jan 12, 2008 5:05 am    Post subject: Reply with quote

Welcome to decades-old Unix history, recreated for your pleasure in GNU/Linux. In most or all of the cases you mention, the shell should be set to /bin/false and the password to heaven only knows what and the account possibly even locked. Any one of those things mean that there's not much security benefit in deleting the user, and you might even break something unexpected. If you're really paranoid about network logins, set your sshd to only allow logins from real users. In fact that's a good idea anyway to keep SSH spammers from trying to log in directly as root.

Edit: For more information on particular users, Google unix username user or unix username account.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum