HardenedBSD/etc/master.passwd

root::0:0::0:0:Charlie &:/root:/bin/csh
toor:*:0:0::0:0:Bourne-again Superuser:/root:
daemon:*:1:1::0:0:Owner of many system processes:/root:/nonexistent
operator:*:2:20::0:0:System &:/usr/guest/operator:/bin/csh
bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/nonexistent
games:*:7:13::0:0:Games pseudo-user:/usr/games:/nonexistent
news:*:8:8::0:0:News Subsystem:/:/nonexistent
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/nonexistent
uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico
xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/nonexistent
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/nonexistent
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/nonexistent
Removed extranious names from master.passwd file, changed root and toor to be in group 0 (was group 10). Changed operator to be in group 20, was 28. 1993-07-19 20:52:51 +02:00			`root::0:0::0:0:Charlie &:/root:/bin/csh`
A real good idea... >From: "Chris G. Demetriou" <cgd@sun-lamp.cs.berkeley.edu> Update of /b/source/CVS/src/etc In directory sun-lamp.cs.berkeley.edu:/usr/src/etc Modified Files: master.passwd Log Message: disable toor by default 1994-02-09 02:57:37 +01:00			`toor:*:0:0::0:0:Bourne-again Superuser:/root:`
Move daemon from group 31 to group 1 One of the reasons: rwhod not work, because it got 1,31 instead of 1,1 on setuid(1) and require group 1 for directory access 1996-09-02 01:13:16 +02:00			`daemon:*:1:1::0:0:Owner of many system processes:/root:/nonexistent`
Removed extranious names from master.passwd file, changed root and toor to be in group 0 (was group 10). Changed operator to be in group 20, was 28. 1993-07-19 20:52:51 +02:00			`operator:*:2:20::0:0:System &:/usr/guest/operator:/bin/csh`
/dev/null was not a very good choice of shell for login-disabled users. Used the canonical non-existent file (/nonexistent) instead This should probably be documented somewhere, but it's unclear where the right place is (passwd(5)? login(8)? hier(7)? all three?). 1994-04-11 21:18:05 +02:00			`bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/nonexistent`
Set shells to nonexistent where appropriate 1996-07-11 23:23:22 +02:00			`games:*:7:13::0:0:Games pseudo-user:/usr/games:/nonexistent`
change nobody master.passwd entry to 65534:65534 change nobody group entry to 65534 Suggested-by: pst 1995-05-15 21:24:57 +02:00			`news:*:8:8::0:0:News Subsystem:/:/nonexistent`
Set shells to nonexistent where appropriate 1996-07-11 23:23:22 +02:00			`man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/nonexistent`
Intruduce new group for uucp, gid 66 1994-05-31 06:36:30 +02:00			`uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico`
Move user & group "xten" from [ug]id == 100 to 67. This is less likely to collide with site policies. 1996-03-12 16:17:29 +01:00			`xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/nonexistent`
Add pop 1997-10-08 10:45:35 +02:00			`pop:*:68:6::0:0:Post Office Owner:/nonexistent:/nonexistent`
Back out moving nobody to daemon class, the problem fixed in another place: inetd 1997-10-27 23:07:03 +01:00			`nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/nonexistent`