Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Jan 2001 23:08:39 -0800
From:      Lawrence Sica <larry@interactivate.com>
To:        Guillermo Leandro <guille@galileo.or.cr>
Cc:        freebsd-security@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG
Subject:   Re: Default users and the passwords
Message-ID:  <3A6E7F77.6DFC4A3E@interactivate.com>
References:  <01012315244000.00612@aristoteles.local.galileo.or.cr>

next in thread | previous in thread | raw e-mail | index | archive | help
Guillermo Leandro wrote:

> Hi everybody!
>
> FreeBSD, like almost all Unix OS, has other default users, like uucp,
> operator, etc. Since this users cames with the FreeBSD distribution, where
> can I find their passwords?
>

they don't have any, the  pseudo users and system accounts dont have a login
shell and their passwords should be set to * as well.    Be careful if you
remove them since on a make world certain users are expected, same with
groups.

>
> Another thing, why is there another uid 0 called toor? Isn't it a potential
> security hole?
>

toor is a  big debate for many, its meant to give you another root shell with
a differing shell, like bash,zsh,ksh whatever.  Reason is you dont wan to mess
with root's shell.  Someone compared root to a loaded weapon recently, its a
good analogy since you dont use root unless you mean it and you have to be
careful.

--Larry





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A6E7F77.6DFC4A3E>