Ignore:
File:
1 edited

Legend:

Unmodified
Added
Removed
  • BOOK/boot/common/pwdgroup.xml

    r688b33d r24b004c  
    99  <?dbhtml filename="pwdgroup.html"?>
    1010
    11   <title>Creating the passwd, group, and log Files</title>
     11  <title>Creating the passwd and group Files</title>
    1212
    1313  <indexterm zone="ch-boot-pwdgroup">
    1414    <primary sortas="e-/etc/passwd">/etc/passwd</primary>
     15    <secondary>boot</secondary>
    1516  </indexterm>
    1617
    1718  <indexterm zone="ch-boot-pwdgroup">
    1819    <primary sortas="e-/etc/group">/etc/group</primary>
    19   </indexterm>
    20 
    21   <indexterm zone="ch-boot-pwdgroup">
    22     <primary sortas="e-/var/run/utmp">/var/run/utmp</primary>
    23   </indexterm>
    24 
    25   <indexterm zone="ch-boot-pwdgroup">
    26     <primary sortas="e-/var/log/btmp">/var/log/btmp</primary>
    27   </indexterm>
    28 
    29   <indexterm zone="ch-boot-pwdgroup">
    30     <primary sortas="e-/var/log/lastlog">/var/log/lastlog</primary>
    31   </indexterm>
    32 
    33   <indexterm zone="ch-boot-pwdgroup">
    34     <primary sortas="e-/var/log/wtmp">/var/log/wtmp</primary>
     20    <secondary>boot</secondary>
    3521  </indexterm>
    3622
     
    4531<screen><userinput>cat &gt; ${CLFS}/etc/passwd &lt;&lt; "EOF"
    4632<literal>root::&uid-root;:&gid-root;:root:/root:/bin/bash</literal>
     33<literal>bin:x:&uid-bin;:&gid-bin;:/bin:/bin/false</literal>
     34<literal>daemon:x:&uid-daemon;:&gid-daemon;:/sbin:/bin/false</literal>
     35<literal>messagebus:x:&uid-messagebus;:&gid-messagebus;:D-Bus Message Daemon User:/dev/null:/bin/false</literal>
     36<literal>nobody:x:&uid-nobody;:&gid-nogroup;:Unprivileged User:/dev/null:/bin/false</literal>
    4737EOF</userinput></screen>
    4838
     
    5242
    5343  <variablelist os="c">
    54  
    55     <title>Additional users you may want to add:</title>
    5644
    57     <varlistentry>
    58       <term><literal>bin:x:&uid-bin;:&gid-bin;:bin:/bin:/bin/false</literal></term>
    59       <listitem>
    60         <para>Can be useful for compatibility with legacy applications.</para>
    61       </listitem>
    62     </varlistentry>
    63     <varlistentry>
    64       <term><literal>daemon:x:&uid-daemon;:&gid-daemon;:daemon:/sbin:/bin/false</literal></term>
    65       <listitem>
    66         <para>It is often recommended to use an unprivileged User ID/Group ID
    67         for daemons to run as, in order to limit their access to the system.</para>
    68       </listitem>
    69     </varlistentry>
     45    <title>Additional users you may want to add if not already included:</title>
     46
    7047    <varlistentry>
    7148      <term><literal>adm:x:&uid-adm;:&gid-adm;:adm:/var/adm:/bin/false</literal></term>
     
    10481      </listitem>
    10582    </varlistentry>
    106     <varlistentry>
    107       <term><literal>nobody:x:&uid-nobody;:&gid-nobody;:nobody:/:/bin/false</literal></term>
    108       <listitem>
    109         <para>Used by NFS</para>
    110       </listitem>
    111     </varlistentry>
    11283  </variablelist>
    11384
     
    131102utmp:x:&gid-utmp;:
    132103usb:x:&gid-usb;:
    133 cdrom:x:&gid-cdrom;:</literal>
     104cdrom:x:&gid-cdrom;:
     105adm:x:&gid-adm;:
     106messagebus:x:&gid-messagebus;:
     107systemd-journal:x:&gid-systemd-journal;:
     108mail:x:&gid-mail;:
     109wheel:x:&gid-wheel;:
     110nogroup:x:&gid-nogroup;:</literal>
    134111EOF</userinput></screen>
    135112
    136113  <variablelist os="d">
    137114
    138     <title>Additional groups you may want to add</title>
     115    <title>Additional groups you may want to add if not already included:</title>
    139116
    140     <varlistentry>
    141       <term><literal>adm:x:&gid-adm;:root,adm,daemon</literal></term>
    142       <listitem>
    143         <para>All users in this group are allowed to do administrative tasks</para>
    144       </listitem>
    145     </varlistentry>
    146117    <varlistentry>
    147118      <term><literal>console:x:&gid-console;:</literal></term>
     
    154125      <listitem>
    155126        <para>This group is allowed to use the CDRW drive</para>
    156       </listitem>
    157     </varlistentry>
    158     <varlistentry>
    159       <term><literal>mail:x:&gid-mail;:mail</literal></term>
    160       <listitem>
    161         <para>Used by MTAs (Mail Transport Agents)</para>
    162127      </listitem>
    163128    </varlistentry>
     
    175140    </varlistentry>
    176141    <varlistentry>
    177       <term><literal>nogroup:x:&gid-nogroup;:</literal></term>
    178       <listitem>
    179         <para>This is a default group used by some programs that do not
    180         require a group</para>
    181       </listitem>
    182     </varlistentry>
    183     <varlistentry>
    184       <term><literal>nobody:x:&gid-nobody;:</literal></term>
     142      <term><literal>nobody:x:&gid-nogroup;:</literal></term>
    185143      <listitem>
    186144        <para>This is used by NFS</para>
     
    190148
    191149  <para os="e">The created groups are not part of any standard&mdash;they are
    192   groups decided on in part by the requirements of the Eudev configuration
     150  groups decided on in part by the requirements of the Systemd configuration
    193151  in the final system, and in part by common convention employed by a
    194152  number of existing Linux distributions. The Linux Standard Base (LSB,
     
    200158  group's name.</para>
    201159
    202   <para os="f">The <command>login</command>, <command>agetty</command>, and
    203   <command>init</command> programs (and others) use a number of log
    204   files to record information such as who was logged into the system and
    205   when. However, these programs will not write to the log files if they
    206   do not already exist. Initialize the log files and give them
    207   proper permissions:</para>
    208 
    209 <screen><userinput>touch ${CLFS}/var/run/utmp ${CLFS}/var/log/{btmp,lastlog,wtmp}
    210 chmod -v 664 ${CLFS}/var/run/utmp ${CLFS}/var/log/lastlog
    211 chmod -v 600 ${CLFS}/var/log/btmp</userinput></screen>
    212 
    213   <para>The <filename>/var/run/utmp</filename> file records the users
    214   that are currently logged in. The <filename>/var/log/wtmp</filename>
    215   file records all logins and logouts. The
    216   <filename>/var/log/lastlog</filename> file records when
    217   each user last logged in. The <filename>/var/log/btmp</filename> file
    218   records the bad login attempts.</para>
    219 
    220160</sect1>
Note: See TracChangeset for help on using the changeset viewer.