HardenedBSD/etc/master.passwd

root::0:0::0:0:Charlie &:/root:/bin/csh
toor:*:0:0::0:0:Bourne-again Superuser:/root:
daemon:*:1:1::0:0:Owner of many system processes:/root:/sbin/nologin
operator:*:2:5::0:0:System &:/:/sbin/nologin
bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin
tty:*:4:65533::0:0:Tty Sandbox:/:/sbin/nologin
kmem:*:5:65533::0:0:KMem Sandbox:/:/sbin/nologin
games:*:7:13::0:0:Games pseudo-user:/usr/games:/sbin/nologin
news:*:8:8::0:0:News Subsystem:/:/sbin/nologin
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/sbin/nologin
bind:*:53:53::0:0:Bind Sandbox:/:/sbin/nologin
uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico
xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/sbin/nologin
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/sbin/nologin
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/sbin/nologin
Removed extranious names from master.passwd file, changed root and toor to be in group 0 (was group 10). Changed operator to be in group 20, was 28. 1993-07-19 20:52:51 +02:00			`root::0:0::0:0:Charlie &:/root:/bin/csh`
A real good idea... >From: "Chris G. Demetriou" <cgd@sun-lamp.cs.berkeley.edu> Update of /b/source/CVS/src/etc In directory sun-lamp.cs.berkeley.edu:/usr/src/etc Modified Files: master.passwd Log Message: disable toor by default 1994-02-09 02:57:37 +01:00			`toor:*:0:0::0:0:Bourne-again Superuser:/root:`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 05:19:37 +02:00			`daemon:*:1:1::0:0:Owner of many system processes:/root:/sbin/nologin`
Use /sbin/nologin as shell for operator Replace non-existent directory for operator with / Supply by default operator with non-existent but can be created directory and /bin/csh is kinda security risk 1998-12-02 16:17:10 +01:00			`operator:*:2:5::0:0:System &:/:/sbin/nologin`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 05:19:37 +02:00			`bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/sbin/nologin`
Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid. 1998-12-01 22:19:49 +01:00			`tty:*:4:65533::0:0:Tty Sandbox:/:/sbin/nologin`
			`kmem:*:5:65533::0:0:KMem Sandbox:/:/sbin/nologin`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 05:19:37 +02:00			`games:*:7:13::0:0:Games pseudo-user:/usr/games:/sbin/nologin`
			`news:*:8:8::0:0:News Subsystem:/:/sbin/nologin`
			`man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/sbin/nologin`
Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53), adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid. 1998-12-01 22:19:49 +01:00			`bind:*:53:53::0:0:Bind Sandbox:/:/sbin/nologin`
Intruduce new group for uucp, gid 66 1994-05-31 06:36:30 +02:00			`uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico`
Change shell from /nonexistent to /sbin/nologin. PR: 6739 Submitted by: Are Bryne <are.bryne@communique.no> 1998-05-25 05:19:37 +02:00			`xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/sbin/nologin`
			`pop:*:68:6::0:0:Post Office Owner:/nonexistent:/sbin/nologin`
			`nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/sbin/nologin`