Re: Creating users that don't need a specific group

2005-09-26 Thread DJ Lucas
Randy McMurchy wrote: That said, what should we do for users that don't need group ID? I've always thought that it was good to dump these types of users into the users group, but thinking about it, perhaps not. I'd appreciate input from the group. I really don't think that it matters a

Re: Creating users that don't need a specific group

2005-09-26 Thread Randy McMurchy
Archaic wrote these words on 09/26/05 00:56 CST: I've always preferred to segregate them in their own group. But if the group ID is truly never going to be used, and there is no security implication of allowing these types of programs to share a group, then perhaps the nogroup group? That is

Re: Creating users that don't need a specific group

2005-09-26 Thread Archaic
On Mon, Sep 26, 2005 at 01:10:38AM -0500, Randy McMurchy wrote: That is a good idea. Let's see if others respond with any different suggestions. If not, I'll go with nogroup and change the PostgreSQL instructions as well. Just to clarify, the first preference was for uid=gid. The latter was

Re: Creating users that don't need a specific group

2005-09-26 Thread Randy McMurchy
DJ Lucas wrote these words on 09/26/05 01:09 CST: I really don't think that it matters a whole lot so long as the chosen group does exist ;-) and is not given perms where they're not needed, but I'll throw out a suggestion anyway. The group 'nogroup' might work well. For me personally on my

Re: Creating users that don't need a specific group

2005-09-26 Thread Archaic
On Mon, Sep 26, 2005 at 01:15:46AM -0500, Randy McMurchy wrote: Thoughts from the group would be appreciated... A generic users groups seems like it could be a security nightmare for a sysadmin. People who do need to share files generally belong to a descriptive group such as research,

Re: Creating users that don't need a specific group

2005-09-26 Thread Matthew Burgess
Randy McMurchy wrote: I'm creating instructions for the BLFS book to add the D-BUS package. There is a user that needs to be created but this user has no specific group that it needs to be added to. In its short life, I believe tradition has this user set up as 'messagebus' in group

Re: Creating users that don't need a specific group

2005-09-26 Thread Randy McMurchy
Matthew Burgess wrote these words on 09/26/05 01:44 CST: In its short life, I believe tradition has this user set up as 'messagebus' in group 'messagebus'. I know it doesn't answer the full question, for that I'm in vehement agreement with archaic - just put users that don't specifially

Re: Creating users that don't need a specific group

2005-09-26 Thread Richard A Downing
Archaic wrote: On Mon, Sep 26, 2005 at 01:15:46AM -0500, Randy McMurchy wrote: Thoughts from the group would be appreciated... A generic users groups seems like it could be a security nightmare for a sysadmin. People who do need to share files generally belong to a descriptive group such

RE: Creating users that don't need a specific group

2005-09-26 Thread David Fix
Consensus from the group though, seems that gid=uid is the most proper solution. Thanks to everyone for their input so far. I'm hoping that Bruce throws his two cents in as well, as I noticed when he created the groups/users table recently, the PostgreSQL user does not have a gid assigned to

Re: Creating users that don't need a specific group

2005-09-26 Thread Bruce Dubbs
Randy McMurchy wrote: Matthew Burgess wrote these words on 09/26/05 01:44 CST: In its short life, I believe tradition has this user set up as 'messagebus' in group 'messagebus'. I know it doesn't answer the full question, for that I'm in vehement agreement with archaic - just put users

Re: Creating users that don't need a specific group

2005-09-26 Thread Randy McMurchy
Bruce Dubbs wrote these words on 09/26/05 10:39 CST: When I added the section About System Users and Groups, I didn't analyze each section, but basically grepped for useradd and groupadd instructions and added those. I didn't notice the users group in the useradd instruction. It certainly

Re: Creating users that don't need a specific group

2005-09-26 Thread Tushar Teredesai
Instead of assigning a specific UID and GID, we could use the following commands when creating the system users (FYI I use a similar construct for my pkg-user pkg manager). This way we don't need to hard code values for each user/group and it is guaranteed to not clash with any existing UID/GID:

Re: Creating users that don't need a specific group

2005-09-26 Thread Bruce Dubbs
Tushar Teredesai wrote: Instead of assigning a specific UID and GID, we could use the following commands when creating the system users (FYI I use a similar construct for my pkg-user pkg manager). This way we don't need to hard code values for each user/group and it is guaranteed to not clash

Re: Creating users that don't need a specific group

2005-09-26 Thread Randy McMurchy
Bruce Dubbs wrote these words on 09/26/05 12:15 CST: P.S. Glad to see all the Houstonites back on the job now. :) That would be Houstonians. :-) -- Randy rmlscsi: [GNU ld version 2.15.94.0.2 20041220] [gcc (GCC) 3.4.3] [GNU C Library stable release version 2.3.4] [Linux 2.6.10 i686]

Re: Creating users that don't need a specific group

2005-09-26 Thread Bruce Dubbs
Randy McMurchy wrote: Bruce Dubbs wrote these words on 09/26/05 12:13 CST: sendmail uses the group mail. Indirectly, I suppose. I have Sendmail installations, with mailboxes, and there is not one file on my systems that have group ownership of 'mail'. Anduin is the same way. I believe

Creating users that don't need a specific group

2005-09-25 Thread Randy McMurchy
Hi all, Noted in the PostgreSQL instructions is that a user postgres is created and assigned to the users group. Best I can tell there is nowhere in LFS or BLFS that specifies to create a users group. I probably did this quite a while back, not realizing that the group users is not identified in

Re: Creating users that don't need a specific group

2005-09-25 Thread Archaic
On Mon, Sep 26, 2005 at 12:45:29AM -0500, Randy McMurchy wrote: That said, what should we do for users that don't need group ID? I've always thought that it was good to dump these types of users into the users group, but thinking about it, perhaps not. I've always preferred to segregate them