Sponsored Content
Top Forums UNIX for Dummies Questions & Answers Application Account with System GID - Confirm or rebut my though on the risk? Post 302088358 by F150 Duke on Monday 11th of September 2006 05:54:11 PM
Old 09-11-2006
Quote:
Originally Posted by System Shock
I don't know of any application account that needs to be part of the root group. Is it homegrown?
Anyway, I'd move it to it's own group.
Yeah it's a homegrown security application.

My agrument is that it shouldn't be apart of the GID = 1, which is "other" on SUN Unix but could be "bin" on Linux. There are too many flavors of Unix with no standard on GIDs, so you run the risk of having inappropriate privileged access.

So I had them move it to it's own separate group that wasn't a designated system GID.

Duke
 

8 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

delete or disable the system generated account

I have this unix version 3.0 "UNIX_SV server 4.0 3.0 3425 Pentium II(TM)-ISA/PCI" can i delete or disable the system generated account as "daemon";"uucp";"sys";"adm";"listen";"bin" and if yes how can i do it? Regards (1 Reply)
Discussion started by: sak900354
1 Replies

2. Forum Support Area for Unregistered Users & Account Problems

new account, not recieving email to confirm

Hello, I registered an account several hours ago, and never recieved the email registration link in my email account. Read the instructions posted here, and requested to resend registration link, and this one also has not shown up in my email acccount. yes, I've checked the bulk folder as... (1 Reply)
Discussion started by: denn
1 Replies

3. UNIX for Dummies Questions & Answers

How to change the system account that a process is running on?

I'm running an Apache server on Ubuntu. When I try to call fopen() in PHP, I get a bunch of permission errors. I searched for advice on this, and I found that I needed to change the system account that Apache runs on. However, I'm not sure how to do this, and I was unable to find the answer on... (3 Replies)
Discussion started by: gloriac991
3 Replies

4. Linux

How to delete a user account in linux bases application.

Hi, Can anyone please guide me how can I remove/block a user from a server access. /usr/sbin/adduser -d /home/john john echo ****** | passwd --stdin john I used the above command to add a user "john". How do I delete and block john. Appreciate your responses. (1 Reply)
Discussion started by: sureshcisco
1 Replies

5. UNIX and Linux Applications

How to delete a user account in linux bases application.

Hi, Can anyone please guide me how can I remove/block a user from a server access. /usr/sbin/adduser -d /home/john john echo ****** | passwd --stdin john I used the above command to add a user "john". How do I delete and block john. Appreciate your responses.... (2 Replies)
Discussion started by: sureshcisco
2 Replies

6. UNIX for Advanced & Expert Users

Link from mount point to sftp account of file system

Hi, Is it possible to do hard link between the mount point of file some structure to the sftp account of some other server ? If possible then what could be the behavior of link properties? Is it could be the same as we found in our environment (unix/linux). Even if we do such link , then it... (1 Reply)
Discussion started by: posix
1 Replies

7. UNIX for Dummies Questions & Answers

Single Application Operating System

I am going to start an ambitious project for my senior year of college. Just as the title says: I want to write a single application operating system that is dedicated to running only one application and none other. I need to build a bare bones UNIX operating system that will use provided binary... (5 Replies)
Discussion started by: unt_engn
5 Replies

8. UNIX for Beginners Questions & Answers

Setting UID and GID for shared folder using NFS method in Linux system

Hi everyone, have a good day to you. I am trying to use NFS to share a folder between 2 linux systems. Let's say the server which is sharing the folder is server A and the client which need to access this shared folder is server B. In server B, i am having a Joe user which UID and GID is 500.... (1 Reply)
Discussion started by: michael_hoang
1 Replies
addgroup(8)						      System Manager's Manual						       addgroup(8)

NAME
addgroup - Adds a new group interactively SYNOPSIS
/usr/sbin/addgroup DESCRIPTION
Security Note If you have enhanced security installed on your system, you should use the dxaccounts program to add a group. See Security and the dxac- counts(8) reference page for more information. The addgroup command is an interactive program for adding new groups to the /etc/group file. The program prompts you for specific informa- tion and informs you of its activity and error conditions. Only the superuser can execute this command. The program performs the following tasks: Queries for a new group name. The default can be chosen by pressing the Return key, which will cause the program to exit without adding a new group. Enter the new group name, 8 characters or less, or Return to exit. If the new group entered already exists in the /etc/group file, the program informs you of this and cycles back to the query for a new group name. If the new group entered does not already exist, the program continues. Queries for a group number (GID) for the new group. A default GID, which is based on previously existing GID's in the /etc/group file, is displayed and can be selected by pressing the Return key. Enter a new GID or accept the default. If the new GID entered already exists in the /etc/group file, the program informs you of this and cycles back to the query for a new group number (GID). If the new GID entered does not already exist in the /etc/group file, the program uses this GID and adds the new group to the /etc/group file. At this point, the program ends. This interface has been superseded by the groupadd command-line interface, and the Account Manager (dxaccounts) graphical user interface. RESTRICTIONS
The group name is limited to eight characters. EXAMPLES
Enter a new group name or <Return> to exit: newgroup Enter a new group number [112]: FILES
Specifies the command path. Group file Lock file SEE ALSO
Commands: adduser(8), dxaccounts(8), groupadd(8), removeuser(8) Files: group(4) addgroup(8)
All times are GMT -4. The time now is 07:28 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy