Changes in BOOK/boot/common/pwdgroup.xml [688b33d:24b004c]
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
BOOK/boot/common/pwdgroup.xml
r688b33d r24b004c 9 9 <?dbhtml filename="pwdgroup.html"?> 10 10 11 <title>Creating the passwd , group, and logFiles</title>11 <title>Creating the passwd and group Files</title> 12 12 13 13 <indexterm zone="ch-boot-pwdgroup"> 14 14 <primary sortas="e-/etc/passwd">/etc/passwd</primary> 15 <secondary>boot</secondary> 15 16 </indexterm> 16 17 17 18 <indexterm zone="ch-boot-pwdgroup"> 18 19 <primary sortas="e-/etc/group">/etc/group</primary> 19 </indexterm> 20 21 <indexterm zone="ch-boot-pwdgroup"> 22 <primary sortas="e-/var/run/utmp">/var/run/utmp</primary> 23 </indexterm> 24 25 <indexterm zone="ch-boot-pwdgroup"> 26 <primary sortas="e-/var/log/btmp">/var/log/btmp</primary> 27 </indexterm> 28 29 <indexterm zone="ch-boot-pwdgroup"> 30 <primary sortas="e-/var/log/lastlog">/var/log/lastlog</primary> 31 </indexterm> 32 33 <indexterm zone="ch-boot-pwdgroup"> 34 <primary sortas="e-/var/log/wtmp">/var/log/wtmp</primary> 20 <secondary>boot</secondary> 35 21 </indexterm> 36 22 … … 45 31 <screen><userinput>cat > ${CLFS}/etc/passwd << "EOF" 46 32 <literal>root::&uid-root;:&gid-root;:root:/root:/bin/bash</literal> 33 <literal>bin:x:&uid-bin;:&gid-bin;:/bin:/bin/false</literal> 34 <literal>daemon:x:&uid-daemon;:&gid-daemon;:/sbin:/bin/false</literal> 35 <literal>messagebus:x:&uid-messagebus;:&gid-messagebus;:D-Bus Message Daemon User:/dev/null:/bin/false</literal> 36 <literal>nobody:x:&uid-nobody;:&gid-nogroup;:Unprivileged User:/dev/null:/bin/false</literal> 47 37 EOF</userinput></screen> 48 38 … … 52 42 53 43 <variablelist os="c"> 54 55 <title>Additional users you may want to add:</title>56 44 57 <varlistentry> 58 <term><literal>bin:x:&uid-bin;:&gid-bin;:bin:/bin:/bin/false</literal></term> 59 <listitem> 60 <para>Can be useful for compatibility with legacy applications.</para> 61 </listitem> 62 </varlistentry> 63 <varlistentry> 64 <term><literal>daemon:x:&uid-daemon;:&gid-daemon;:daemon:/sbin:/bin/false</literal></term> 65 <listitem> 66 <para>It is often recommended to use an unprivileged User ID/Group ID 67 for daemons to run as, in order to limit their access to the system.</para> 68 </listitem> 69 </varlistentry> 45 <title>Additional users you may want to add if not already included:</title> 46 70 47 <varlistentry> 71 48 <term><literal>adm:x:&uid-adm;:&gid-adm;:adm:/var/adm:/bin/false</literal></term> … … 104 81 </listitem> 105 82 </varlistentry> 106 <varlistentry>107 <term><literal>nobody:x:&uid-nobody;:&gid-nobody;:nobody:/:/bin/false</literal></term>108 <listitem>109 <para>Used by NFS</para>110 </listitem>111 </varlistentry>112 83 </variablelist> 113 84 … … 131 102 utmp:x:&gid-utmp;: 132 103 usb:x:&gid-usb;: 133 cdrom:x:&gid-cdrom;:</literal> 104 cdrom:x:&gid-cdrom;: 105 adm:x:&gid-adm;: 106 messagebus:x:&gid-messagebus;: 107 systemd-journal:x:&gid-systemd-journal;: 108 mail:x:&gid-mail;: 109 wheel:x:&gid-wheel;: 110 nogroup:x:&gid-nogroup;:</literal> 134 111 EOF</userinput></screen> 135 112 136 113 <variablelist os="d"> 137 114 138 <title>Additional groups you may want to add </title>115 <title>Additional groups you may want to add if not already included:</title> 139 116 140 <varlistentry>141 <term><literal>adm:x:&gid-adm;:root,adm,daemon</literal></term>142 <listitem>143 <para>All users in this group are allowed to do administrative tasks</para>144 </listitem>145 </varlistentry>146 117 <varlistentry> 147 118 <term><literal>console:x:&gid-console;:</literal></term> … … 154 125 <listitem> 155 126 <para>This group is allowed to use the CDRW drive</para> 156 </listitem>157 </varlistentry>158 <varlistentry>159 <term><literal>mail:x:&gid-mail;:mail</literal></term>160 <listitem>161 <para>Used by MTAs (Mail Transport Agents)</para>162 127 </listitem> 163 128 </varlistentry> … … 175 140 </varlistentry> 176 141 <varlistentry> 177 <term><literal>nogroup:x:&gid-nogroup;:</literal></term> 178 <listitem> 179 <para>This is a default group used by some programs that do not 180 require a group</para> 181 </listitem> 182 </varlistentry> 183 <varlistentry> 184 <term><literal>nobody:x:&gid-nobody;:</literal></term> 142 <term><literal>nobody:x:&gid-nogroup;:</literal></term> 185 143 <listitem> 186 144 <para>This is used by NFS</para> … … 190 148 191 149 <para os="e">The created groups are not part of any standard—they are 192 groups decided on in part by the requirements of the Eudevconfiguration150 groups decided on in part by the requirements of the Systemd configuration 193 151 in the final system, and in part by common convention employed by a 194 152 number of existing Linux distributions. The Linux Standard Base (LSB, … … 200 158 group's name.</para> 201 159 202 <para os="f">The <command>login</command>, <command>agetty</command>, and203 <command>init</command> programs (and others) use a number of log204 files to record information such as who was logged into the system and205 when. However, these programs will not write to the log files if they206 do not already exist. Initialize the log files and give them207 proper permissions:</para>208 209 <screen><userinput>touch ${CLFS}/var/run/utmp ${CLFS}/var/log/{btmp,lastlog,wtmp}210 chmod -v 664 ${CLFS}/var/run/utmp ${CLFS}/var/log/lastlog211 chmod -v 600 ${CLFS}/var/log/btmp</userinput></screen>212 213 <para>The <filename>/var/run/utmp</filename> file records the users214 that are currently logged in. The <filename>/var/log/wtmp</filename>215 file records all logins and logouts. The216 <filename>/var/log/lastlog</filename> file records when217 each user last logged in. The <filename>/var/log/btmp</filename> file218 records the bad login attempts.</para>219 220 160 </sect1>
Note:
See TracChangeset
for help on using the changeset viewer.