From owner-freebsd-questions@FreeBSD.ORG Mon Aug 15 16:42:38 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3DBF31065675 for ; Mon, 15 Aug 2011 16:42:38 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout028.mac.com (asmtpout028.mac.com [17.148.16.103]) by mx1.freebsd.org (Postfix) with ESMTP id 2611A8FC15 for ; Mon, 15 Aug 2011 16:42:37 +0000 (UTC) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from cswiger1.apple.com ([17.209.4.71]) by asmtp028.mac.com (Oracle Communications Messaging Exchange Server 7u4-20.01 64bit (built Nov 21 2010)) with ESMTPSA id <0LPZ005UMAEG7T90@asmtp028.mac.com> for freebsd-questions@freebsd.org; Mon, 15 Aug 2011 09:42:17 -0700 (PDT) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.4.6813,1.0.211,0.0.0000 definitions=2011-08-15_05:2011-08-15, 2011-08-15, 1970-01-01 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1108150169 From: Chuck Swiger In-reply-to: <20110815163659.GA22081@gmail.com> Date: Mon, 15 Aug 2011 09:42:16 -0700 Message-id: <238F0CF5-33DC-4F9A-88E3-F8356E125573@mac.com> References: <20110815163659.GA22081@gmail.com> To: Chris Brennan X-Mailer: Apple Mail (2.1084) Cc: FreeBSD Questions Subject: Re: unprivledged users (for a service) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Aug 2011 16:42:38 -0000 On Aug 15, 2011, at 9:37 AM, Chris Brennan wrote: > It's been a while since I've had to do this and the drive that contained > all of my notes is dead, along with the backup (I was actually lucky to > recover my home drive before it also failed but my notes were not > there). I cannot for the life of me remember how to properly add an > unprivledged user that will only be used for running a specific system > service. So it doesn't need a login shell or $HOME. Add a user and set the shell to /bin/false or perhaps /sbin/nologin; for $HOME set it to /var/empty or /tmp, perhaps. Regards, -- -Chuck