From owner-freebsd-isp@FreeBSD.ORG Mon Jun 2 10:02:59 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2C9D637B401 for ; Mon, 2 Jun 2003 10:02:59 -0700 (PDT) Received: from bilver.wjv.com (user38.net339.fl.sprint-hsd.net [65.40.24.38]) by mx1.FreeBSD.org (Postfix) with ESMTP id F0B0443F93 for ; Mon, 2 Jun 2003 10:02:57 -0700 (PDT) (envelope-from bv@wjv.com) Received: from bilver.wjv.com (localhost.wjv.com [127.0.0.1]) by bilver.wjv.com (8.12.9/8.12.9) with ESMTP id h52H2ks3053318 for ; Mon, 2 Jun 2003 13:02:46 -0400 (EDT) (envelope-from bv@wjv.com) Received: (from bv@localhost) by bilver.wjv.com (8.12.9/8.12.9/Submit) id h52H2jIn053317 for freebsd-isp@freebsd.org; Mon, 2 Jun 2003 13:02:45 -0400 (EDT) Date: Mon, 2 Jun 2003 13:02:45 -0400 From: Bill Vermillion To: freebsd-isp@freebsd.org Message-ID: <20030602170244.GA53243@wjv.com> References: <001b01c3291e$80b3ca90$23fbab3f@psknet.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: W.J.Vermillion / Orlando - Winter Park ReplyTo: bv@wjv.com User-Agent: Mutt/1.5.1i X-Spam-Status: No, hits=-26.6 required=5.0 tests=IN_REP_TO,QUOTED_EMAIL_TEXT,QUOTE_TWICE_1,REFERENCES, REPLY_WITH_QUOTES,USER_AGENT_MUTT version=2.53 X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp) Subject: Re: quick poppassd question X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: bv@wjv.com List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jun 2003 17:02:59 -0000 While normally not able to pour water out of a boot with instructions on the heel, on Mon, Jun 02, 2003 at 10:50 our dear friend Wolfpaw - Dale Corse uttered this load of codswallop: > > Perhaps someone can shed more light on the subject, but it's my > > impression that most system process run with a UID/GID > > under 100. So a > > uid < 100 should deny the change request. > Perhaps, though the trend is running most things as non-priv > users, because it minimizes the damage to the server if a > process is compromised. Generally "non-system" accounts seem > to start at 1000 (BSD, and most Linux), or 500 (notably Redhat) > so.. you may want to use 500 as the magic number for portability > reasons. And for adding users manually you can change the 1000 to whatever value you want in the /etc/adduser.conf file. If you use the plain adduser command CLI with manual user options there is the -uid NNNNN piece. > freebsd-isp@freebsd.org mailing list Bill -- Bill Vermillion - bv @ wjv . com