From 1be510f9529cb082f802408b472a77d074b394c0 Mon Sep 17 00:00:00 2001 From: Nicolas Vigier Date: Sun, 14 Apr 2013 13:46:12 +0000 Subject: Add zarb MLs html archives --- zarb-ml/mageia-dev/2012-September/018700.html | 92 +++++++++++++++++++++++++++ 1 file changed, 92 insertions(+) create mode 100644 zarb-ml/mageia-dev/2012-September/018700.html (limited to 'zarb-ml/mageia-dev/2012-September/018700.html') diff --git a/zarb-ml/mageia-dev/2012-September/018700.html b/zarb-ml/mageia-dev/2012-September/018700.html new file mode 100644 index 000000000..6df814aba --- /dev/null +++ b/zarb-ml/mageia-dev/2012-September/018700.html @@ -0,0 +1,92 @@ + + + + [Mageia-dev] halt and shutdown users: Still needed? + + + + + + + + + +

[Mageia-dev] halt and shutdown users: Still needed?

+ rihoward1 at gmail.com + rihoward1 at gmail.com +
+ Sun Sep 16 18:13:24 CEST 2012 +

+
+ +
+On Sep 9, 2012, at 3:10 AM, Julien wrote:
+
+> Le Sun, 09 Sep 2012 12:55:17 +0300,
+> Sander Lepik <sander.lepik at eesti.ee> a écrit :
+> 
+>> 08.09.2012 19:49, Colin Guthrie kirjutas:
+>>> Hi,
+>>> 
+>>> So there exists two users (provided by default from the setup pkg)
+>>> called "halt" and "shutdown". These users just run the halt and shutdown
+>>> commands as their shell. This means su'ing or sudo'ing or setting a
+>>> password and logging in as them, will shut the machine down.
+>>> 
+>>> This seems like a relic from many years ago and there is no need to
+>>> include such users in this day and age. Should we kill them off?
+>>> 
+>>> Col
+>>> 
+>> +1 on removing them. I didn't even know about them :)
+>> 
+>> --
+>> Sander
+>> 
+> 
+> The same for me, didn't know they existed.
+> 
+> Julien
+
+
+- 1
+Removing them is a really bad idea.  It violates fundamental security principles. 
+There is a reason processes are run with their user permissions.
+
+
+ + + + + +
+

+ +
+More information about the Mageia-dev +mailing list
+ -- cgit v1.2.1