[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: System Accounts



Hello,
In /etc/passwd verify that they are actually loginable.  Some
deamons/programs, etc need an account to run, but don't actually
need to login.  This would be for security reasons, so you don't run
it as root, thus, making it harder for someone to exploit your
server and gain root access.

-Adam

On Mon, Oct 14, 2002 at 09:47:42AM -0400, R. Bradley Tilley wrote:
> Hello,
> 
> I am experimenting with a Debian system to be used as a firewall/gateway. I am 
> using Debian 3.0 with the 2.4.18 kernel. I did a basic install selecting the 
> Unix server task. Just wondering why there are so many accounts with shell 
> access installed by default? 
> 
> games, irc, news, gnats, lp, uucp, operator, backup, etc.
> 
> For security reasons, I would like to remove these accounts, but I don't 
> understand how the system uses them, or if it uses them at all. Can someone 
> explain this? Also, what are the bare minimum accounts? 
> 
> Thank you,
> Brad
> 
> 
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 


-------------------------------------------------
Adam Spickler
Whaddu LLC.
http://www.whaddu.com
WebHosting and Design/Development Unlimited
-------------------------------------------------



Reply to: