Solaris

Hi,

Anyone know what is the use of the tty group in Solaris 8 , I was question
by auditor that tty group exist in the /etc/group but without a user exist in
/etc/passwd and /etc/shadow file .

"User accounts listed in the etc/group should be also listed in the etc/passwd. It is possible that files may become group orphans if a group is deleted without proper housekeeping. Intruders to the system could potentially seize ownership of these group orphaned files. "

What should I do , remove the tty group ?


Thanks

what I know is tty return user's terminal name
you need not remove such entry

# cat /etc/group
root::0:root
other::1:
bin::2:root,bin,daemon
sys::3:root,bin,sys,adm
adm::4:root,adm,daemon
uucp::5:root,uucp
mail::6:root
tty::7:root,tty,adm

You can use the find command to look for all files that have their gid set to 7. It might shed some light on a few things. For instance

Code:

find / -xdev -gid 7 -ls

If /var is mounted separately, I'd check that too.