[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: The 'users' gid: sync, games, and man



On Sun, Feb 09, 2003 at 02:20:53PM +0100, Josip Rodin wrote:
> On Sun, Feb 09, 2003 at 12:34:19PM +0000, Colin Watson wrote:
> > sync:
> > games:
> > man:
> 
> Good summary. I'm inclined to say nogroup, games, nogroup,

I don't think man should be nogroup for much the same reasons I don't
think it should be users, so I think I'll go with a dedicated group.
Otherwise, agreed.

> because using the root group would possibly compromise other files on
> the system that happen to be 0640, 0740 etc. Not that there should be
> any such files, but still. Note also that nothing else appears to be
> using the root group by default.

Yes, fair point, and I agree. Some systems might use the root group to
control who can su as well.

I've applied this in my local copy, pending any objections:

Index: group.master
===================================================================
--- group.master        (revision 715)
+++ group.master        (revision 716)
@@ -9,6 +9,7 @@
 mail:*:8:
 news:*:9:
 uucp:*:10:
+man:*:12:
 proxy:*:13:
 kmem:*:15:
 dialout:*:20:
Index: passwd.master
===================================================================
--- passwd.master       (revision 715)
+++ passwd.master       (revision 716)
@@ -2,9 +2,9 @@
 daemon:*:1:1:daemon:/usr/sbin:/bin/sh
 bin:*:2:2:bin:/bin:/bin/sh
 sys:*:3:3:sys:/dev:/bin/sh
-sync:*:4:100:sync:/bin:/bin/sync
-games:*:5:100:games:/usr/games:/bin/sh
-man:*:6:100:man:/var/cache/man:/bin/sh
+sync:*:4:65534:sync:/bin:/bin/sync
+games:*:5:60:games:/usr/games:/bin/sh
+man:*:6:12:man:/var/cache/man:/bin/sh
 lp:*:7:7:lp:/var/spool/lpd:/bin/sh
 mail:*:8:8:mail:/var/mail:/bin/sh
 news:*:9:9:news:/var/spool/news:/bin/sh

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]



Reply to: