1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] halt and shutdown users: Still needed?
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20halt%20and%20shutdown%20users%3A%20Still%20needed%3F&In-Reply-To=%3C5055FDE3.4000502%40eesti.ee%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="018700.html">
<LINK REL="Next" HREF="018714.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] halt and shutdown users: Still needed?</H1>
<B>Sander Lepik</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20halt%20and%20shutdown%20users%3A%20Still%20needed%3F&In-Reply-To=%3C5055FDE3.4000502%40eesti.ee%3E"
TITLE="[Mageia-dev] halt and shutdown users: Still needed?">sander.lepik at eesti.ee
</A><BR>
<I>Sun Sep 16 18:27:15 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="018700.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI>Next message: <A HREF="018714.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#18701">[ date ]</a>
<a href="thread.html#18701">[ thread ]</a>
<a href="subject.html#18701">[ subject ]</a>
<a href="author.html#18701">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>16.09.2012 19:13, <A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">rihoward1 at gmail.com</A> kirjutas:
><i> On Sep 9, 2012, at 3:10 AM, Julien wrote:
</I>><i>
</I>>><i> Le Sun, 09 Sep 2012 12:55:17 +0300,
</I>>><i> Sander Lepik <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">sander.lepik at eesti.ee</A>> a écrit :
</I>>><i>
</I>>>><i> 08.09.2012 19:49, Colin Guthrie kirjutas:
</I>>>>><i> Hi,
</I>>>>><i>
</I>>>>><i> So there exists two users (provided by default from the setup pkg)
</I>>>>><i> called "halt" and "shutdown". These users just run the halt and shutdown
</I>>>>><i> commands as their shell. This means su'ing or sudo'ing or setting a
</I>>>>><i> password and logging in as them, will shut the machine down.
</I>>>>><i>
</I>>>>><i> This seems like a relic from many years ago and there is no need to
</I>>>>><i> include such users in this day and age. Should we kill them off?
</I>>>>><i>
</I>>>>><i> Col
</I>>>>><i>
</I>>>><i> +1 on removing them. I didn't even know about them :)
</I>>>><i>
</I>>>><i> --
</I>>>><i> Sander
</I>>>><i>
</I>>><i> The same for me, didn't know they existed.
</I>>><i>
</I>>><i> Julien
</I>><i>
</I>><i> - 1
</I>><i> Removing them is a really bad idea. It violates fundamental security principles.
</I>><i> There is a reason processes are run with their user permissions.
</I>><i>
</I>Hmm, i'm not sure you know what you are talking about. Can you show me where in the code are
we doing that?
--
Sander
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="018700.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI>Next message: <A HREF="018714.html">[Mageia-dev] halt and shutdown users: Still needed?
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#18701">[ date ]</a>
<a href="thread.html#18701">[ thread ]</a>
<a href="subject.html#18701">[ subject ]</a>
<a href="author.html#18701">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
