Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Oct 1999 18:55:51 -0400
From:      Jack Rusher <jar@mail.integratus.com>
To:        Robert Watson <robert+freebsd@cyrus.watson.org>
Cc:        James Wyatt <jwyatt@rwsystems.net>, Greg Lewis <glewis@trc.adelaide.edu.au>, freebsd-security@FreeBSD.ORG
Subject:   Re: FreeSSH
Message-ID:  <38050DF7.768902E7@integratus.com>
References:  <Pine.BSF.3.96.991013170937.22726D-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Robert Watson wrote:
> 
> "local users SHOULD be given a unique uid >= 1000 -- values less than 1000
> are reserved for built-in accounts, and for add-on packages" or the like.
> For the purposes of NFS, it seems desirable that when a package is
> installed, it use the same uid consistently?
> 
> I'm not sure the correct course of action is clear in my mind, but
> whatever it is, it is certainly security-relevant.

It seems to me that an /etc/services style mapping of services to
UIDs would be an excellent idea.  This sort of standardization would
make the world work a little more smoothly.

-- 
Jack Rusher, Chief Engineer | mailto:jar@integratus.com
Integratus, Inc.            | http://www.integratus.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38050DF7.768902E7>