freebsd-dev/etc/master.passwd

# $FreeBSD$
#
root::0:0::0:0:Charlie &:/root:/bin/csh
toor:*:0:0::0:0:Bourne-again Superuser:/root:
daemon:*:1:1::0:0:Owner of many system processes:/root:/sbin/nologin
operator:*:2:5::0:0:System &:/:/sbin/nologin
bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin
tty:*:4:65533::0:0:Tty Sandbox:/:/sbin/nologin
kmem:*:5:65533::0:0:KMem Sandbox:/:/sbin/nologin
games:*:7:13::0:0:Games pseudo-user:/usr/games:/sbin/nologin
news:*:8:8::0:0:News Subsystem:/:/sbin/nologin
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/sbin/nologin
smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/sbin/nologin
mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/sbin/nologin
bind:*:53:53::0:0:Bind Sandbox:/:/sbin/nologin
uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico
xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/sbin/nologin
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/sbin/nologin
www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/sbin/nologin
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/sbin/nologin
Add/adjust some $FreeBSD$ tags. Noted by: Doug <Doug@gorean.org> 1999-09-13 17:09:08 +00:00			`# $FreeBSD$`
			`#`
Removed extranious names from master.passwd file, changed root and toor to be in group 0 (was group 10). Changed operator to be in group 20, was 28. 1993-07-19 18:52:51 +00:00			`root::0:0::0:0:Charlie &:/root:/bin/csh`
A real good idea... >From: "Chris G. Demetriou" <cgd@sun-lamp.cs.berkeley.edu> Update of /b/source/CVS/src/etc In directory sun-lamp.cs.berkeley.edu:/usr/src/etc Modified Files: master.passwd Log Message: disable toor by default 1994-02-09 01:57:37 +00:00			`toor:*:0:0::0:0:Bourne-again Superuser:/root:`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 03:19:37 +00:00			`daemon:*:1:1::0:0:Owner of many system processes:/root:/sbin/nologin`
Use /sbin/nologin as shell for operator Replace non-existent directory for operator with / Supply by default operator with non-existent but can be created directory and /bin/csh is kinda security risk 1998-12-02 15:17:10 +00:00			`operator:*:2:5::0:0:System &:/:/sbin/nologin`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 03:19:37 +00:00			`bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin`
Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid. 1998-12-01 21:19:49 +00:00			`tty:*:4:65533::0:0:Tty Sandbox:/:/sbin/nologin`
			`kmem:*:5:65533::0:0:KMem Sandbox:/:/sbin/nologin`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 03:19:37 +00:00			`games:*:7:13::0:0:Games pseudo-user:/usr/games:/sbin/nologin`
			`news:*:8:8::0:0:News Subsystem:/:/sbin/nologin`
			`man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/sbin/nologin`
Add two new accounts/groups for sendmail: smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of set-user-ID). This new user/group will be used for command line submissions. UID/GID 25 is suggested in the sendmail documentation and has been adopted by other operating systems such as OpenBSD and Solaris 9. mailnull - The default value for DefaultUser is now set to the uid and gid of the first existing user mailnull, sendmail, or daemon that has a non-zero uid. If none of these exist, sendmail reverts back to the old behavior of using uid 1 and gid 1. Currently FreeBSD uses daemon for DefaultUser but I would prefer not to use an account used by other programs, hence the addition of mailnull. UID/GID 26 has been chosen for this user. This was discussed on -arch on October 18-19, 2001. MFC after: 1 week 2001-11-17 21:24:45 +00:00			`smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/sbin/nologin`
			`mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/sbin/nologin`
Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid. 1998-12-01 21:19:49 +00:00			`bind:*:53:53::0:0:Bind Sandbox:/:/sbin/nologin`
Intruduce new group for uucp, gid 66 1994-05-31 04:36:30 +00:00			`uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 03:19:37 +00:00			`xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/sbin/nologin`
			`pop:*:68:6::0:0:Post Office Owner:/nonexistent:/sbin/nologin`
Re-commit www:www If anybody wants to remove them for some reason, please consider "pop" removing first. Approved by: arch discussion from Oct 20 MFC after: 3 days 2001-10-25 03:27:16 +00:00			`www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/sbin/nologin`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 03:19:37 +00:00			`nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/sbin/nologin`