Home | History | Annotate | Download | only in etc
History log of /src/etc/master.passwd
RevisionDateAuthorComments
 1.52  08-Oct-2021  nia Change the default shell of the "toor" user to /rescue/sh

toor is a backup account to be used in case of trouble.

When root's default shell was changed to from /bin/csh to /bin/sh,
toor lost its purpose.

/rescue/sh is an ideal choice here because it's a static binary,
while we've moved to dynamic linking for the rest of the system.

Discussed a few times over the years on tech-userlevel.
 1.51  02-Apr-2020  roy Add _dhcpcd user and group
 1.50  09-Jan-2017  christos branches: 1.50.14;
fix nsd home dir.
 1.49  07-Jan-2017  christos add nsd
 1.48  20-Aug-2016  christos unbound additions
 1.47  09-Jul-2013  roy branches: 1.47.10;
Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36
 1.46  25-Apr-2012  riz branches: 1.46.2;
Change root's default shell to /bin/sh, to provide a default which
has command line editing, tab completion, and other features users
have come to expect from a modern OS.

Discussed on current-users approximately two weeks ago. Should be
pulled up for NetBSD 6.0.
 1.45  28-Jan-2012  christos branches: 1.45.2;
- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.
 1.44  05-Aug-2011  jmmv branches: 1.44.2;
Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.
 1.43  17-Dec-2010  jruoho Make tcpdump(8) to drop root privileges and chroot(2) by default.
 1.42  07-Nov-2010  jmmv Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.
 1.41  04-Oct-2009  christos mdnsd home should not be /var/www!
 1.40  29-Sep-2009  tsarna Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.
 1.39  16-Oct-2007  tls Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.
 1.38  18-Mar-2007  plunky branches: 1.38.4;
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd
 1.37  28-Jan-2007  cbiere Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".
 1.36  12-Nov-2006  christos branches: 1.36.2; 1.36.4;
goodbye uucp
 1.35  08-Oct-2006  dogcow add all the proper fields to _proxy
 1.34  07-Oct-2006  rpaulo PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!
 1.33  30-May-2006  christos Remove sendmail (approved by core)
 1.32  12-Sep-2005  tsarna add _rwhod user (and group)
 1.31  04-Apr-2005  peter Add the _pflogd user which will be used by pflogd(8), the logging daemon
for pf(4).

Approved by core.
 1.30  25-Jan-2003  soren branches: 1.30.6;
Oops, didn't mean to remove toor (just yet).
 1.29  25-Jan-2003  soren Consistently with previous such changes, make daemon's default group 1(daemon)
rather than 31(guest). FreeBSD and OpenBSD have done the same thing.
 1.28  27-Oct-2002  christos make nobody's shell back /sbin/nologin. we'll use su -m for xdm.
 1.27  27-Oct-2002  christos Don't make the shell of nobody /sbin/nologin. There are programs that expect
to be executing su nobody -c 'command', such as xdm's Xwilling do this.
 1.26  06-Jul-2002  tron Remove unused user and group "news" as discussed on "tech-userlevel".
 1.25  05-Jun-2002  itojun uid/gid for sendmail 8.12.x.
disallow chroot priv accounts from being used for ftp.
 1.24  20-May-2002  atatat tweak GECOS for games
 1.23  20-May-2002  atatat tweak GECOS for postfix
 1.22  17-May-2002  lukem fix ~sshd. tweak GECOS for named,ntpd,sshd
 1.21  14-May-2002  itojun dig sshd uid/gid, and /var/empty, for sshd privilege separation
 1.20  11-Oct-2001  lukem - add "ntpd" user (homedir: /var/chroot/ntpd) and "ntpd" group, for use by
future work to support a chroot(8)ed ntpd
- move /var/named -> /var/chroot/named for consistency with ntpd
 1.19  04-Mar-2001  lukem remove `falken' user; nothing depends upon it, it causes confusion about
whether it's required or not, and by default it's useless anyway (because
the one-hit-wonder joke with respect to its shell being /usr/games/wargames
is moot unless you enable the account)
 1.18  26-Feb-2001  lukem remove `ingres' user & group; we have never shipped with ingres in the
base distribution, and packages that need a specific user & group can
create it.
 1.17  26-Feb-2001  lukem add named pseudo-user & group
 1.16  27-Mar-1999  abs If we have an 'operator' user, it should at least be gid operator.
 1.15  27-Mar-1999  perry add postfix uid/gid, maildrop gid
 1.14  25-Mar-1999  lukem change user `nobody's group from 9999 (non-existant) to 39 (group `nobody').
from Soren S. Jorvang <soren@t.dk> in [misc/6806]
 1.13  17-Mar-1999  wrstuden toor is back, disabled by default as before.
 1.12  16-Mar-1999  jonathan Revert to status quo ante (root's shell is csh, per BSD tradition),
pending the proper procedures for making such a change.
 1.11  15-Mar-1999  hubertf Give root a Bourne shell.
 1.10  14-Mar-1999  abs It was just Plain Wrong to ship a password file that triggers /etc/security.
Remove toor - if people want another root account, we'll assume they can
copy and modify the root line.
 1.9  19-Aug-1997  lukem As per [bin/1814] from Arne Juul <arnej@imf.unit.no>, and discussions
with matt green <mrg@netbsd.org> (to shut up /etc/security)
* set ingres account shell to /sbin/nologin
* set ~daemon to / (not /root)
 1.8  10-Jul-1997  mikel make toor's shell explicit to shut up /etc/security
 1.7  15-Feb-1997  mikel cleanup Lite-1 merge
 1.6  03-Nov-1994  mycroft Correct the professor's name.
 1.5  09-Feb-1994  cgd disable toor by default
 1.4  09-Aug-1993  jtc uucp's shell, uucico, is in /usr/libexec/uucp (not /usr/lib/uucp).
 1.3  06-Jun-1993  cgd make root/operator group ids sane...
 1.2  02-Apr-1993  cgd got rid of bill, lynne, ken, and dmr
 1.1  21-Mar-1993  cgd branches: 1.1.1;
Initial revision
 1.1.1.3  25-Feb-1997  mikel import 4.4BSD-Lite2
 1.1.1.2  15-Feb-1997  mikel import 4.4BSD-Lite
 1.1.1.1  21-Mar-1993  cgd initial import of 386bsd-0.1 sources
 1.30.6.2  22-Feb-2008  bouyer Pull up following revision(s) (requested by jnemeth in ticket #1898):
etc/master.passwd: revision 1.34, 1.35 via patch
etc/group: revision 1.20
dist/pf/libexec/ftp-proxy/ftp-proxy.c: revision 1.12 via patch
distrib/notes/common/main: patch
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!
add all the proper fields to _proxy
 1.30.6.1  13-Apr-2005  tron Pull up revision 1.31 (requested by peter in ticket #134):
Add the _pflogd user which will be used by pflogd(8), the logging daemon
for pf(4).
Approved by core.
 1.36.4.1  29-Oct-2007  wrstuden Catch up with 4.0 RC3
 1.36.2.1  14-Oct-2007  riz Pull up following revision(s) (requested by xtraeme in ticket #930):
etc/group: revision 1.22
etc/defaults/rc.conf: revision 1.85
etc/master.passwd: revision 1.38
usr.sbin/sdpd/sdpd.8: revision 1.2
usr.sbin/sdpd/sdpd.8: revision 1.3
share/man/man5/rc.conf.5: revision 1.113
etc/rc.d/sdpd: revision 1.2
usr.sbin/sdpd/server.c: revision 1.3
usr.sbin/postinstall/postinstall: revision 1.38
usr.sbin/sdpd/server.h: revision 1.2
usr.sbin/sdpd/main.c: revision 1.2
usr.sbin/sdpd/main.c: revision 1.3
Add an option to permit members of a specific group to register services, in
order to lower the barrier for users of bluetooth devices which may need to
query services on the local host.
change default user/group from nobody/nobody to _sdpd/_sdpd
 1.38.4.1  06-Nov-2007  matt sync with HEAD
 1.44.2.3  22-May-2014  yamt sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")
 1.44.2.2  23-May-2012  yamt sync with head.
 1.44.2.1  17-Apr-2012  yamt sync with head
 1.45.2.1  20-Jul-2012  riz Pull up following revision(s) (requested by gson in ticket #426):
etc/master.passwd: revision 1.46
Change root's default shell to /bin/sh, to provide a default which
has command line editing, tab completion, and other features users
have come to expect from a modern OS.
Discussed on current-users approximately two weeks ago. Should be
pulled up for NetBSD 6.0.
 1.46.2.1  19-Aug-2014  tls Rebase to HEAD as of a few days ago.
 1.47.10.1  20-Mar-2017  pgoyette Sync with HEAD
 1.50.14.1  08-Apr-2020  martin Merge changes from current as of 20200406

RSS XML Feed