From owner-freebsd-hackers Thu Oct 30 17:51:00 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id RAA00238 for hackers-outgoing; Thu, 30 Oct 1997 17:51:00 -0800 (PST) (envelope-from owner-freebsd-hackers) Received: from cs.iastate.edu (root@cs.iastate.edu [129.186.3.1]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id RAA00225 for ; Thu, 30 Oct 1997 17:50:52 -0800 (PST) (envelope-from ghelmer@cs.iastate.edu) Received: from popeye.cs.iastate.edu (popeye.cs.iastate.edu [129.186.3.4]) by cs.iastate.edu (8.8.7/8.8.7) with ESMTP id TAA13083; Thu, 30 Oct 1997 19:50:44 -0600 (CST) Received: from localhost (ghelmer@localhost) by popeye.cs.iastate.edu (8.8.7/8.7.1) with SMTP id TAA08142; Thu, 30 Oct 1997 19:50:43 -0600 (CST) X-Authentication-Warning: popeye.cs.iastate.edu: ghelmer owned process doing -bs Date: Thu, 30 Oct 1997 19:50:42 -0600 (CST) From: Guy Helmer To: James Raynard cc: Brandon Gillespie , freebsd-hackers@FreeBSD.ORG Subject: Re: Suggested addition to /etc/security In-Reply-To: <19971030224420.52951@jraynard.demon.co.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk On Thu, 30 Oct 1997, James Raynard wrote: > On Thu, Oct 30, 1997 at 10:18:37AM -0700, Brandon Gillespie wrote: > > I'm not sure if /etc/security is a good place for it, but I think it would > > be a good idea to add this check (at least once a week) to somewhere: > > > > ------------------------------------------------- > > echo "checking for invalid user or group ids:" > > > > find / -nouser -nogroup > > ------------------------------------------------- > > How about adding a check for processes run by non-existent users as well, > while we're on the subject? I've seen cases of people's login sessions > living on weeks or even months after they've left... That's odd -- the current rmuser should kill all of the user's processes (but that change didn't make it into 2.2 until 2.2.5). Guy Helmer, Computer Science Graduate Student - ghelmer@cs.iastate.edu Iowa State University http://www.cs.iastate.edu/~ghelmer Research Assistant, Scalable Computing Laboratory, Ames Laboratory