Re: defining system accounts and groups in DCE or AFS

[Bill Fithen]

David McNab <[EMAIL PROTECTED]> said:
> At least one principle that you should not remove is
> "none".   I did that while trying trying to do the same
> thing you're talking about -- clean up the registry --
> and I was very, very sorry.     -- Dave

The list of principals I propose to delete are:

        daemon
        sys
        bin
        uucp
        who
        mail
        tcb

And I changed the UID for nobody from -2 to 60001. And I am not sure
about root. Philosophically I would remove it, but practically it is
the same among all systems so it is unlikely to cause a problem.

The list of groups I propose to delete are:

        system
        daemon
        uucp
        bin
        kmem
        mail
        tty
        tcb

Bill