The group "operator" gatekeeps a few superuser abilities (dumping disks,
manipulating tape drives -> means gid operator on device nodes). This group
is also used with group-access bit on the setuid-

The group "operator" gatekeeps a few superuser abilities (dumping disks,
manipulating tape drives -> means gid operator on device nodes). This group
is also used with group-access bit on the setuid-root shutdown command
(mode ug+x,u+s). Some people use this to shutdown/reboot their machines, but
use of that group is giving them disk read access also, which is wrong.
It would be a pain to re-gid all the device nodes, so instead let's renumber
the operator execution gid into group "_shutdown".
Users using this shutdown/reboot functionality will notice it no longer works,
and move themselves to the correct group.
Various choices discussed at large, this seems our best choice.
ok sthen

show more ...

(Re)add support for agentx in snmpd
Current omissions in protocol support are notifications,
index (de)allocation, and agent capabilities.

Help testing sthen@
Feedback/tweaks/OK jmatthew@

Add missing colon. Noticed by jmc@

Hook up bgplgd. Uses _bgplgd user with id 71:71 add a rc.d script and
all the other rc plumbing.
OK deraadt@

Remove _switchd user/group/alias

ok millert deraadt

switchd(8) was removed back in November. Commit message was:

Retire switchd and switchctl. While interesting they never managed to
really get in

Remove _switchd user/group/alias

ok millert deraadt

switchd(8) was removed back in November. Commit message was:

Retire switchd and switchctl. While interesting they never managed to
really get into a usable state. The OpenFlow API is mostly superseeded
by P4 and so this is a bit of a dead end.

show more ...

sort

retire rebound etc bits to the attic

uid/gid 70 is _rpki-client for privdrop; ok benno

add _unwind user; OK deraadt

Remove rtadvd(8) leftovers in etc.
OK deraadt, phessler

Add _rad user and group for rad(8).
This recycles the _btd uid/gid that have been removed in 2013.
Discussed in the hackroom.

add user for slaacd(8)

Add the _syspatch user/group: an unprivileged user for syspatch(8) used to fetch
and verify patches.

discussed with deraadt@ rpe@
ok deraadt@

Remove user uucp and group news from base.

Introduce the build user and the wobj group that will soon be used as
defaults for building the system from source.

ok deraadt

use better uid/gid for _switchd

Add _switchd

Add unprivileged user for traceroute.
Input deraadt@
OK benno@, sthen@

Add _ping user/group.
OK natano on a previous diff which used a different uid/gid.
naddy@ pointed out that uid/gid was already taken on "important" systems.
Turns out we cannot easily recycle freed u

Add _ping user/group.
OK natano on a previous diff which used a different uid/gid.
naddy@ pointed out that uid/gid was already taken on "important" systems.
Turns out we cannot easily recycle freed up uids/gids so settle on 51.

show more ...

proxy uid/gid was split up for seperate purposes; it can go away now.

add proper entries for pkg_add privsep, instead of piggy-backing on _pfetch
which was a "better than nothing" measure for 5.9.

Another user to come. Approved by deraadt@ on principle.

thanks sthen@

add proper entries for pkg_add privsep, instead of piggy-backing on _pfetch
which was a "better than nothing" measure for 5.9.

Another user to come. Approved by deraadt@ on principle.

thanks sthen@ for checking my lines over.

show more ...

Add _sndiop user and group for (future) privileged sndiod process.

ok deraadt

create new independent uid/gid for tftp_proxy and ftp_proxy.
They should not share a uid. Leave the proxy uid for later mop-up
(sysmerge does not handle uid renamings well enough)
ok dlg, ok aja a w

create new independent uid/gid for tftp_proxy and ftp_proxy.
They should not share a uid. Leave the proxy uid for later mop-up
(sysmerge does not handle uid renamings well enough)
ok dlg, ok aja a while back

show more ...

Add user "_vmd" for forthcoming vmd daemon

ok deraadt@

_rebound user and group (52)