|
|
Sponsored Content
Operating Systems
Solaris
do i need these users?
Post 302071029 by dsbeerf on Tuesday 11th of April 2006 01:45:21 PM
04-11-2006
While it is not necessary, it is recommended that you get rid of the 'UUCP' users. [uucp & nuucp]
Since they belong to a 'system' that is RARELY used.
You do this by executing the 'pkgrm' command for the two UUCP packages: SUNWbnuu && SUNWbnur.
Which (respectively) are 'Basic Networking Utilities (User)' and 'Basic Networking Utilities (Root)'.
[Remove in that order.]
They are usually considered security risks, and are really not much use unless there is a modem attached to the computer.
The 'nobody && noaccess' users are sometimes used as IDs to run certain processed as, to make the processes less likely to cause harm if 'hacked'.
Netscape used to run the 'httpd' as 'nobody' by default, some folks run Apache as that user.
The 'smmsp' user is what sendmail runs it's 'listen' process as, and the 'listen' user is a left over from the AT&T System V Release 4 OS (which was the original 'root OS' that Solaris grew out of).
The 'listen' user no longer is used, BUT, as you said, there might be 'stuff' lingering around that requires it.
Since they belong to a 'system' that is RARELY used.
You do this by executing the 'pkgrm' command for the two UUCP packages: SUNWbnuu && SUNWbnur.
Which (respectively) are 'Basic Networking Utilities (User)' and 'Basic Networking Utilities (Root)'.
[Remove in that order.]
They are usually considered security risks, and are really not much use unless there is a modem attached to the computer.
The 'nobody && noaccess' users are sometimes used as IDs to run certain processed as, to make the processes less likely to cause harm if 'hacked'.
Netscape used to run the 'httpd' as 'nobody' by default, some folks run Apache as that user.
The 'smmsp' user is what sendmail runs it's 'listen' process as, and the 'listen' user is a left over from the AT&T System V Release 4 OS (which was the original 'root OS' that Solaris grew out of).
The 'listen' user no longer is used, BUT, as you said, there might be 'stuff' lingering around that requires it.
Last edited by dsbeerf; 04-11-2006 at 02:54 PM..
|
|
8 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
Is there any way to find the number of unique users in a system other than
who | cut -d" " -f1 | sort -u | wc -l
? (3 Replies)
Discussion started by: asutoshch
3 Replies
2. HP-UX
Is there a command to tell what applications certain users ran in past few months? And thier last login? This is on HPUX machine
Thanks! (1 Reply)
Discussion started by: catwomen
1 Replies
3. Shell Programming and Scripting
Hello everyone
I need to send to a file the last command from all users who log in and log out by week or month.
My questions are
I can do it with the command or I need to do a script ?
If the answer is I need to do a script, someone can help me because Im complete new to make a... (3 Replies)
Discussion started by: lo-lp-kl
3 Replies
4. HP-UX
Hi,
I have searched the web and have come back with nothing that is satisfactory for what I require. SFTP is my corporations new file transfer standard. What I require is a method to lock down SFTP users to their directory (they may go to sub directories) while not restricting regular users. ... (2 Replies)
Discussion started by: Emancipator
2 Replies
5. Solaris
Hi All,
How to restrict the NIS users not to change their passwords in for NIS users??
and my NIS user is unable to login to at client location what could be the problem for this ?
Any body can help me. Thanks in advance. (1 Reply)
Discussion started by: Sharath Kumar
1 Replies
6. Red Hat
Hi All,
I work in a multi user environment where my school uses Red Hat Linux server. When I issue commands such as "top" or "users", I get to see what others are doing and what kinds of applications they are running (even ps -aux will give such information). "users" will let me know who else is... (1 Reply)
Discussion started by: shoaibjameel123
1 Replies
7. Red Hat
Hi,
i have a problem, itīs because users without belonging wheel group cannot switch to another user , when the password is introduced says not right password. The only solution for now is to add them to wheel users, but then i have another problem, they can login as root.
Is there any... (3 Replies)
Discussion started by: pabloli150
3 Replies
8. Shell Programming and Scripting
hi,
i am new to shell scripts
i write a shell script to create multiple users but i need to give passwords to that users while creating users, command to write this script (1 Reply)
Discussion started by: DONFOX
1 Replies
LEARN ABOUT SUNOS
ftpusers
ftpusers(4) ftpusers(4) NAME
ftpusers - file listing users to be disallowed ftp login privileges SYNOPSIS
/etc/ftpd/ftpusers The ftpusers file lists users for whom ftp login privileges are disallowed. Each ftpuser entry is a single line of the form: name where name is the user's login name. The FTP Server, in.ftpd(1M), reads the ftpusers file. If the login name of the user matches one of the entries listed, it rejects the login attempt. The ftpusers file has the following default configuration entries: root daemon bin sys adm lp uccp nuucp smmsp listen nobody noaccess nobody4 These entries match the default instantiated entries from passwd(4). The list of default entries typically contains the superuser root and other administrative and system application identities. The root entry is included in the ftpusers file as a security measure since the default policy is to disallow remote logins for this iden- tity. This policy is also set in the default value of the CONSOLE entry in the /etc/default/login file. See login(1). If you allow root login privileges by deleting the root entry in ftpusers, you should also modify the security policy in /etc/default/login to reflect the site security policy for remote login access by root. Other default entries are administrative identities that are typically assumed by system applications but never used for local or remote login, for example sys and nobody. Since these entries do not have a valid password field instantiated in shadow(4), no login can be per- formed. If a site adds similar administrative or system application identities in passwd(4) and shadow(4), for example, majordomo, the site should consider including them in the ftpusers file for a consistent security policy. Lines that begin with # are treated as comment lines and are ignored. /etc/ftpd/ftpusers A file that lists users for whom ftp login privileges are disallowed. /etc/ftpusers See /etc/ftpd/ftpusers. This file is deprecated, although its use is still supported. /etc/default/login /etc/passwd password file /etc/shadow shadow password file See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWftpr | +-----------------------------+-----------------------------+ |Interface Stability |External | | | | | /etc/ftpd/ftpusers | | +-----------------------------+-----------------------------+ |Interface Stability |Obsolete | | | | | /etc/ftpusers | | +-----------------------------+-----------------------------+ login(1), in.ftpd(1M), ftpaccess(4), ftphosts(4), passwd(4), shadow(4), attributes(5), environ(5) 1 May 2003 ftpusers(4)