Change the default shell of the "toor" user to /rescue/sh

toor is a backup account to be used in case of trouble.

When root's default shell was changed to from /bin/csh to /bin/sh,
toor lost its pu

Change the default shell of the "toor" user to /rescue/sh

toor is a backup account to be used in case of trouble.

When root's default shell was changed to from /bin/csh to /bin/sh,
toor lost its purpose.

/rescue/sh is an ideal choice here because it's a static binary,
while we've moved to dynamic linking for the rest of the system.

Discussed a few times over the years on tech-userlevel.

show more ...

Add _dhcpcd user and group

fix nsd home dir.

add nsd

unbound additions

Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into

Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36

show more ...

Change root's default shell to /bin/sh, to provide a default which
has command line editing, tab completion, and other features users
have come to expect from a modern OS.

Discussed on current-users

Change root's default shell to /bin/sh, to provide a default which
has command line editing, tab completion, and other features users
have come to expect from a modern OS.

Discussed on current-users approximately two weeks ago. Should be
pulled up for NetBSD 6.0.

show more ...

- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.

Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also,

Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.

show more ...

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.

mdnsd home should not be /var/www!

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.

For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd

Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".

goodbye uucp

add all the proper fields to _proxy

PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!

Remove sendmail (approved by core)

add _rwhod user (and group)

Add the _pflogd user which will be used by pflogd(8), the logging daemon
for pf(4).

Approved by core.

Oops, didn't mean to remove toor (just yet).

Consistently with previous such changes, make daemon's default group 1(daemon)
rather than 31(guest). FreeBSD and OpenBSD have done the same thing.

make nobody's shell back /sbin/nologin. we'll use su -m for xdm.