With regards to adding user accounts, I thought I'd mention this... 
Oxygen has had a "lrp" user from early on.  More notes to follow...

Charles Steinkuehler wrote:
> 
> > As always, this is truly superb stuff!  Bravo, Charles !!!
> >
> > Couple questions, even though these items appeared in RC5:
> >
> > [1] What is the purpose of the ``leaf'' user?
> 
> It was in Jacques' example passwd file...I added it mainly as a 'stub' entry
> for pointing to if someone wanted to add/create a new user account.  It
> should not be used in most instances (having actual user accounts on your
> firewall isn't necessarily all that useful or prudent), so I changed the
> /etc/shadow entry for this user to dis-allow logins by default.

A standard security recommendation is to operate in the root account as
*LITTLE* as possible.  The lrp user, for me, was set up as a standard
user for this purpose.

> > [2] Should /home/leaf exist -- provided that we agree that such an user
> > ought to exist?
> 
> Probably, but let's see if I can rationalize my way out of an
> oversight...Hmm...making a directory isn't that hard, and other than a
> .profile entry, which isn't really necessary, it's just a place-holder
> taking up space in /root...if we add a .profile entry, it takes up even more
> space...but perhaps the best excuse..er reason it's not there, is you
> shouldn't really create user accounts in the first place, and I did really
> intend the leaf user to be either a stub entry you'd modify, or or a default
> entry for any non-root owned files you might want to put in a package (so
> they don't come up as user 100 on ls -l listings).

/home/leaf (or /home/lrp) is the standard location that the user gets
put to when they log in - so, yes, it ought to exist.

Your opinion may vary...

_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to