mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-28 03:42:04 +01:00
dd3c1b5f96
adjustd inetd.conf to run comsat and ntalk from tty sandbox, and
the (commented out) ident from the kmem sandbox.
Note that it is necessary to give each group access it's own uid to
prevent programs running under a single uid from being able to gdb
or otherwise mess with other programs (with different group perms) running
under the same uid.
23 lines
324 B
Plaintext
23 lines
324 B
Plaintext
# $Id: group,v 1.17 1998/09/13 23:05:46 brian Exp $
|
|
#
|
|
wheel:*:0:root
|
|
daemon:*:1:daemon
|
|
kmem:*:2:root
|
|
sys:*:3:root
|
|
tty:*:4:root
|
|
operator:*:5:root
|
|
mail:*:6:
|
|
bin:*:7:
|
|
news:*:8:
|
|
man:*:9:
|
|
games:*:13:
|
|
staff:*:20:root
|
|
guest:*:31:root
|
|
bind:*:53:
|
|
uucp:*:66:
|
|
xten:*:67:xten
|
|
dialer:*:68:
|
|
network:*:69:
|
|
nogroup:*:65533:
|
|
nobody:*:65534:
|