On Fri, 28 Jan 2011, Pawel Jakub Dawidek wrote:
Author: pjd
Date: Fri Jan 28 22:28:12 2011
New Revision: 218046
URL: http://svn.freebsd.org/changeset/base/218046
Log:
Add 'hast' user and 'hast' group that will be used by hastd (and maybe hastctl)
to drop privileges.
Does it really have to be a high number in the 50-1000 range tracked
by ports/UIDs ports/GIDs? I am worried that we'll soon end up in a
problem with that anyway:(
MFC after: 1 week
Modified:
head/etc/group
head/etc/master.passwd
Modified: head/etc/group
==============================================================================
--- head/etc/group Fri Jan 28 21:57:42 2011 (r218045)
+++ head/etc/group Fri Jan 28 22:28:12 2011 (r218046)
@@ -27,5 +27,6 @@ dialer:*:68:
network:*:69:
audit:*:77:
www:*:80:
+hast:*:845:
nogroup:*:65533:
nobody:*:65534:
Modified: head/etc/master.passwd
==============================================================================
--- head/etc/master.passwd Fri Jan 28 21:57:42 2011 (r218045)
+++ head/etc/master.passwd Fri Jan 28 22:28:12 2011 (r218046)
@@ -20,4 +20,5 @@ _dhcp:*:65:65::0:0:dhcp programs:/var/em
uucp:*:66:66::0:0:UUCP
pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin
www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
+hast:*:845:845::0:0:HAST unprivileged user:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin
--
Bjoern A. Zeeb You have to have visions!
<ks> Going to jail sucks -- <bz> All my daemons like it!
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/jails.html
_______________________________________________
svn-src-head@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"