blob: 6df814abadcccdef68c7786dd856f0bffb00f21a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] halt and shutdown users: Still needed?
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20halt%20and%20shutdown%20users%3A%20Still%20needed%3F&In-Reply-To=%3CBF309945-7453-4B33-948D-A24F8BD69156%40gmail.com%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="018597.html">
<LINK REL="Next" HREF="018701.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] halt and shutdown users: Still needed?</H1>
<B>rihoward1 at gmail.com</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20halt%20and%20shutdown%20users%3A%20Still%20needed%3F&In-Reply-To=%3CBF309945-7453-4B33-948D-A24F8BD69156%40gmail.com%3E"
TITLE="[Mageia-dev] halt and shutdown users: Still needed?">rihoward1 at gmail.com
</A><BR>
<I>Sun Sep 16 18:13:24 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="018597.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI>Next message: <A HREF="018701.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#18700">[ date ]</a>
<a href="thread.html#18700">[ thread ]</a>
<a href="subject.html#18700">[ subject ]</a>
<a href="author.html#18700">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>
On Sep 9, 2012, at 3:10 AM, Julien wrote:
><i> Le Sun, 09 Sep 2012 12:55:17 +0300,
</I>><i> Sander Lepik <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">sander.lepik at eesti.ee</A>> a écrit :
</I>><i>
</I>>><i> 08.09.2012 19:49, Colin Guthrie kirjutas:
</I>>>><i> Hi,
</I>>>><i>
</I>>>><i> So there exists two users (provided by default from the setup pkg)
</I>>>><i> called "halt" and "shutdown". These users just run the halt and shutdown
</I>>>><i> commands as their shell. This means su'ing or sudo'ing or setting a
</I>>>><i> password and logging in as them, will shut the machine down.
</I>>>><i>
</I>>>><i> This seems like a relic from many years ago and there is no need to
</I>>>><i> include such users in this day and age. Should we kill them off?
</I>>>><i>
</I>>>><i> Col
</I>>>><i>
</I>>><i> +1 on removing them. I didn't even know about them :)
</I>>><i>
</I>>><i> --
</I>>><i> Sander
</I>>><i>
</I>><i>
</I>><i> The same for me, didn't know they existed.
</I>><i>
</I>><i> Julien
</I>
- 1
Removing them is a really bad idea. It violates fundamental security principles.
There is a reason processes are run with their user permissions.
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="018597.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI>Next message: <A HREF="018701.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#18700">[ date ]</a>
<a href="thread.html#18700">[ thread ]</a>
<a href="subject.html#18700">[ subject ]</a>
<a href="author.html#18700">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
