From owner-freebsd-questions@FreeBSD.ORG  Wed Aug 18 04:16:40 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4C7B016A4CE
	for <freebsd-questions@freebsd.org>;
	Wed, 18 Aug 2004 04:16:40 +0000 (GMT)
Received: from newman.alt-network.com (wsip-68-110-223-100.ks.ok.cox.net
	[68.110.223.100])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D95C143D5A
	for <freebsd-questions@freebsd.org>;
	Wed, 18 Aug 2004 04:16:39 +0000 (GMT)
	(envelope-from justin@alt-network.com)
Received: from [192.168.0.14] ([192.168.0.14])i7I4GYSu012045;
	Tue, 17 Aug 2004 23:16:34 -0500 (CDT)
	(envelope-from justin@alt-network.com)
From: "Justin L. Boss" <justin@alt-network.com>
Organization: Alternative Network Solutions
To: freebsd-questions@freebsd.org, jacoulter@jacoulter.net
Date: Tue, 17 Aug 2004 23:16:34 -0500
User-Agent: KMail/1.6.2
References: <20040816145737.GA3924@sara.mshome.net>
In-Reply-To: <20040816145737.GA3924@sara.mshome.net>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <200408172316.34568.justin@alt-network.com>
X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.64
X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on 
	newman.alt-network.com
Subject: Re: Security question - uids of 0
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Aug 2004 04:16:40 -0000

toor is a base system user. It is a default user. It is used for several 
reason and is secure as long as no one can access your console directly.

On Monday 16 August 2004 09:57 am, James A. Coulter wrote:
> The following appeared in my latest daily security run output:
>
>  Checking for uids of 0:
>  root 0
>  toor 0
>
> This is the first time I've seen this message.
>
> I checked /etc/passwd and found this:
>
>  root:*:0:0:Charlie &:/root:/bin/csh
>  toor:*:0:0:Bourne-again Superuser:/root:
>
> I am running FreeBSD 4.10 as a gateway/router/firewall with IPFW for a
> small home LAN.
>
> I ran ps -aux and looked for any processes owned by "toor" but didn't find
> any.
>
> Is this something to be concerned about?
>
> Sorry if this is an obvious question, but I am still very much a newbie
> and trying to learn what I can about security.
>
> Thanks for your patience,
>
> Jim
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
> "freebsd-questions-unsubscribe@freebsd.org"