Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-06-02 | user, group & /var/db/dhcp6leased for dhcpleased(8) | Florian Obser | |
typo spotted by ccappuc Input & OK deraadt | |||
2022-06-28 | Hook up bgplgd. Uses _bgplgd user with id 71:71 add a rc.d script and | Claudio Jeker | |
all the other rc plumbing. OK deraadt@ | |||
2022-04-21 | Remove _switchd user/group/alias | Daniel Jakots | |
ok millert deraadt switchd(8) was removed back in November. Commit message was: Retire switchd and switchctl. While interesting they never managed to really get into a usable state. The OpenFlow API is mostly superseeded by P4 and so this is a bit of a dead end. | |||
2020-04-24 | rpki-client does not do privsep and also no chroot to /var/empty. Change | Claudio Jeker | |
the user to 'rpki-client user' and the homedir to /nonexistent since it is not required for operation of rpki-client. OK deraadt@ | |||
2020-01-24 | retire rebound etc bits to the attic | Ted Unangst | |
2019-11-15 | fix the spelling of rpki, as noted by jmc@ | Sebastian Benoit | |
2019-11-14 | uid/gid 70 is _rpki-client for privdrop; ok benno | Theo de Raadt | |
2019-01-26 | add _unwind user; OK deraadt | Florian Obser | |
2018-07-23 | Remove rtadvd(8) leftovers in etc. | Florian Obser | |
OK deraadt, phessler | |||
2018-07-12 | Add _rad user and group for rad(8). | Florian Obser | |
This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom. | |||
2017-03-18 | add user for slaacd(8) | Florian Obser | |
2017-01-19 | Add the _syspatch user/group: an unprivileged user for syspatch(8) used to fetch | Antoine Jacoutot | |
and verify patches. discussed with deraadt@ rpe@ ok deraadt@ | |||
2016-12-27 | Remove user uucp and group news from base. | Jeremie Courreges-Anglas | |
2016-11-15 | Introduce the build user and the wobj group that will soon be used as | Theo Buehler | |
defaults for building the system from source. ok deraadt | |||
2016-10-07 | use better uid/gid for _switchd | Theo de Raadt | |
2016-10-06 | Add switchd | Reyk Floeter | |
OK deraadt@ | |||
2016-09-27 | Add unprivileged user for traceroute. | Florian Obser | |
Input deraadt@ OK benno@, sthen@ | |||
2016-09-26 | Add _ping user/group. | Florian Obser | |
OK natano on a previous diff which used a different uid/gid. naddy@ pointed out that uid/gid was already taken on "important" systems. Turns out we cannot easily recycle freed up uids/gids so settle on 51. | |||
2016-09-13 | proxy uid/gid was split up for seperate purposes; it can go away now. | Theo de Raadt | |
2016-03-05 | add proper entries for pkg_add privsep, instead of piggy-backing on _pfetch | Marc Espie | |
which was a "better than nothing" measure for 5.9. Another user to come. Approved by deraadt@ on principle. thanks sthen@ for checking my lines over. | |||
2015-12-16 | Add _sndiop user and group for (future) privileged sndiod process. | Alexandre Ratchov | |
ok deraadt | |||
2015-12-01 | create new independent uid/gid for tftp_proxy and ftp_proxy. | Theo de Raadt | |
They should not share a uid. Leave the proxy uid for later mop-up (sysmerge does not handle uid renamings well enough) ok dlg, ok aja a while back | |||
2015-11-09 | Add user "_vmd" for forthcoming vmd daemon | Mike Larkin | |
ok deraadt@ | |||
2015-10-15 | _rebound user and group (52) | Ted Unangst | |
2015-10-04 | add _eigrpd user/group | Theo de Raadt | |
2015-07-21 | Add _radius to etc/master.passwd and etc/group for coming radiusd. | YASUOKA Masahiko | |
ok deraadt | |||
2015-07-17 | Add _dpb, _pbuild, _pfetch users to make it easier for people doing dpb | Stuart Henderson | |
multi-user builds. Discussed with espie, ajacoutot, ok deraadt | |||
2015-04-27 | Add a _file user and use for privsep, ok deraadt | Nicholas Marriott | |
2015-02-17 | Put the _unbound user in "unbound" login class; unbound uses setusercontext | Stuart Henderson | |
to initialize the unprivileged user, so the usual rc.d mechanism to set the class isn't used. Problem reported by otto, ok otto@ ajacoutout@ | |||
2014-09-15 | Remove sendmail tentacles. ok krw@ ajacoutot@ | Matthieu Herrb | |
2014-08-22 | disable use of bind in base; in the base use nsd/unbound instead. | Theo de Raadt | |
a proper & complete bind port will show up. discussed with many for years | |||
2014-04-27 | Get back "_ppp" user and "_ppp" group. From now they will be solely | YASUOKA Masahiko | |
used by npppd. ok deraadt | |||
2014-03-17 | _ppp uid/gid will come up for recycling (but please not within a year) | Theo de Raadt | |
2014-03-15 | Enable Unbound in base, ok deraadt@ | Stuart Henderson | |
2014-03-13 | smtpd dudes forgot to add their _smtpq user | Ted Unangst | |
2013-12-15 | remove popa3d etc tendrils | Ted Unangst | |
2013-08-19 | Remove the following users which became obsolete: | Antoine Jacoutot | |
* _afs: arla/nnpfs got disabled then removed long ago * _kdc, _kadmin: these were added 10 years ago but never used for anything afaict ok dcoppa@ beck@ | |||
2013-08-09 | Remove all references to btd and the corresponding _btd user and group. | Antoine Jacoutot | |
ok sthen@ deraadt@ | |||
2013-02-09 | There is no /usr/libexec/uucp/uucico in base; uucico (8) is provided by | Antoine Jacoutot | |
the net/uccp package and is installed under /usr/local/. Since we don't want a shell that default to /usr/local/..., use /sbin/nologin. The uucp package will automatically change to the correct shell on pkg_add / pkg_delete. idea from and ok miod@ | |||
2012-10-12 | Add the _iscsid user, required by iscsid | David Coppa | |
OK claudio@ | |||
2011-10-04 | Stop spreading lies about the usage of 'nobody', it's confusing to link it | Jasper Lievisse Adriaanse | |
with NFS here. Result of a discussion with several. ok deraadt@ millert@ | |||
2010-07-02 | Remove bogus commas from the "bin" entry. | David Coppa | |
OK sobrado@, todd@ | |||
2010-06-03 | Add a new _iked user with uid 101 instead of (ab)using the _isakmpd user. | Reyk Floeter | |
ok deraadt@ | |||
2010-06-03 | enable ldapd and ldapctl in the build | Martin Hedenfal | |
ok deraadt@ | |||
2010-04-22 | Allow multiple users to share the same aucat server. If aucat is | Alexandre Ratchov | |
run by root, it binds a shared address to the socket, cranks the process priority and drops privileges. sio_open(3) will try to connect to the private socket first (if any), then to the shared socket. Only one user may have connections to aucat at a given time. based on discussions with henning, pyr and others ok jacek, deraadt | |||
2010-02-22 | Add _ldpd user for ldpd(8). OK dlg, deraadt | Claudio Jeker | |
2010-01-16 | add user/group for nsd; ok nick@ | Jakob Schlyter | |
2009-05-20 | Do not fall back to using nobody if _user is missing, but | Thordur I. Bjornsson | |
error out. Add a new user _rwalld for rpc.rwalld, and use that instead of nobody, also unconditionally drop to _rwalld not only if rpc.rwalld was started with euid 0 (as root). ok deraadt@ | |||
2009-03-04 | add user and group for smtpd | Gilles Chehade | |
discussed with pyr@ and deraadt@ | |||
2009-02-13 | nobody is for NFS, and nobody should *&^#@$ use it for anything else | Theo de Raadt | |