Re: should not specify default group for users

["H. Peter Anvin" <hpa@transmeta.com>]

Alan Cox wrote:
> 
> > I agreed to your earlier changes, not the recent ones.  :-)  If by default
> > all users are in group "users", then the umask must be 022 or the more
> > paranoid 077.   The umask cannot be 002 in this case; otherwise, other
> > /home users on the system will have write access.
> 
> This is not the case. You are missing the point of this
> 
> The idea of putting all users in group users is that an application can
> obtain an idea of what is a normal user. Not that this is being used
> for generic file permissions.
> 
> The two issues are unrelated.
> 

The way that is traditionally done in the Unix world is that if the user
shell is found in /etc/shells then it is a normal user.  Does this
suffice?

	-hpa