NetBSD/etc/master.passwd

root::0:0::0:0:Charlie &:/root:/bin/sh
toor:*:0:0::0:0:Bourne-again Superuser:/root:/bin/sh
daemon:*:1:1::0:0:The devil himself:/:/sbin/nologin
operator:*:2:5::0:0:System &:/usr/guest/operator:/sbin/nologin
bin:*:3:7::0:0:Binaries Commands and Source:/:/sbin/nologin
games:*:7:13::0:0:& pseudo-user:/usr/games:/sbin/nologin
postfix:*:12:12::0:0:& pseudo-user:/var/spool/postfix:/sbin/nologin
named:*:14:14::0:0:& pseudo-user:/var/chroot/named:/sbin/nologin
ntpd:*:15:15::0:0:& pseudo-user:/var/chroot/ntpd:/sbin/nologin
sshd:*:16:16::0:0:& pseudo-user:/var/chroot/sshd:/sbin/nologin
_pflogd:*:18:18::0:0:& pseudo-user:/var/chroot/pflogd:/sbin/nologin
_rwhod:*:19:19::0:0:& pseudo-user:/var/rwho:/sbin/nologin
_proxy:*:21:21::0:0:Proxy Services:/nonexistent:/sbin/nologin
_timedc:*:22:22::0:0:& pseudo-user:/nonexistent:/sbin/nologin
_sdpd:*:23:23::0:0:& pseudo-user:/nonexistent:/sbin/nologin
_httpd:*:24:24::0:0:& pseudo-user:/var/www:/sbin/nologin
_mdnsd:*:25:25::0:0:& pseudo-user:/nonexistent:/sbin/nologin
_tests:*:26:26::0:0:& pseudo-user:/nonexistent:/sbin/nologin
_tcpdump:*:27:27::0:0:& pseudo-user:/var/chroot/tcpdump:/sbin/nologin
_tss:*:28:28::0:0:& pseudo-user:/var/tpm:/sbin/nologin
_rtadvd:*:30:30::0:0:& pseudo-user:/var/chroot/rtadvd:/sbin/nologin
_unbound:*:32:32::0:0:& pseudo-user:/var/chroot/unbound:/sbin/nologin
uucp:*:66:1::0:0:UNIX-to-UNIX Copy:/nonexistent:/sbin/nologin
nobody:*:32767:39::0:0:Unprivileged user:/nonexistent:/sbin/nologin
Change root's default shell to /bin/sh, to provide a default which has command line editing, tab completion, and other features users have come to expect from a modern OS. Discussed on current-users approximately two weeks ago. Should be pulled up for NetBSD 6.0. 2012-04-25 20:11:26 +04:00			`root::0:0::0:0:Charlie &:/root:/bin/sh`
Oops, didn't mean to remove toor (just yet). 2003-01-25 04:14:03 +03:00			`toor:*:0:0::0:0:Bourne-again Superuser:/root:/bin/sh`
Consistently with previous such changes, make daemon's default group 1(daemon) rather than 31(guest). FreeBSD and OpenBSD have done the same thing. 2003-01-25 04:13:29 +03:00			`daemon:*:1:1::0:0:The devil himself:/:/sbin/nologin`
If we have an 'operator' user, it should at least be gid operator. 1999-03-27 06:51:41 +03:00			`operator:*:2:5::0:0:System &:/usr/guest/operator:/sbin/nologin`
cleanup Lite-1 merge 1997-02-15 13:02:07 +03:00			`bin:*:3:7::0:0:Binaries Commands and Source:/:/sbin/nologin`
tweak GECOS for games 2002-05-20 19:08:25 +04:00			`games:*:7:13::0:0:& pseudo-user:/usr/games:/sbin/nologin`
tweak GECOS for postfix 2002-05-20 19:06:19 +04:00			`postfix:*:12:12::0:0:& pseudo-user:/var/spool/postfix:/sbin/nologin`
fix ~sshd. tweak GECOS for named,ntpd,sshd 2002-05-17 09:47:41 +04:00			`named:*:14:14::0:0:& pseudo-user:/var/chroot/named:/sbin/nologin`
			`ntpd:*:15:15::0:0:& pseudo-user:/var/chroot/ntpd:/sbin/nologin`
			`sshd:*:16:16::0:0:& pseudo-user:/var/chroot/sshd:/sbin/nologin`
Add the _pflogd user which will be used by pflogd(8), the logging daemon for pf(4). Approved by core. 2005-04-04 23:06:43 +04:00			`_pflogd:*:18:18::0:0:& pseudo-user:/var/chroot/pflogd:/sbin/nologin`
add _rwhod user (and group) 2005-09-12 20:21:56 +04:00			`_rwhod:*:19:19::0:0:& pseudo-user:/var/rwho:/sbin/nologin`
add all the proper fields to _proxy 2006-10-08 06:34:51 +04:00			`_proxy:*:21:21::0:0:Proxy Services:/nonexistent:/sbin/nologin`
Let timedc use the dedicated account "_timedc" for dropping privileges instead of abusing the account "nobody". 2007-01-28 16:51:29 +03:00			`_timedc:*:22:22::0:0:& pseudo-user:/nonexistent:/sbin/nologin`
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd 2007-03-18 18:53:54 +03:00			`_sdpd:*:23:23::0:0:& pseudo-user:/nonexistent:/sbin/nologin`
Add httpd to the build. Add _httpd to passwd and groups and postinstall. Add /var/www to mtree, add example line to inetd.conf. 2007-10-16 06:47:12 +04:00			`_httpd:*:24:24::0:0:& pseudo-user:/var/www:/sbin/nologin`
mdnsd home should not be /var/www! 2009-10-04 05:40:53 +04:00			`_mdnsd:*:25:25::0:0:& pseudo-user:/nonexistent:/sbin/nologin`
Rename the _atf user to _tests. The _atf name will get obsoleted if/when we migrate to Kyua (atf v2), so it's better to use a generic name that does not depend on the specific implementation. Also, this user has not gone out yet into any stable release, so we can easily rename it. Suggested by jruoho@. 2011-08-05 18:43:41 +04:00			`_tests:*:26:26::0:0:& pseudo-user:/nonexistent:/sbin/nologin`
Make tcpdump(8) to drop root privileges and chroot(2) by default. 2010-12-17 12:54:27 +03:00			`_tcpdump:*:27:27::0:0:& pseudo-user:/var/chroot/tcpdump:/sbin/nologin`
- add _tss user for tcsd, and needed directories for TrouSerS. This is all unused as of now because the trousers is not connected to the build yet. 2012-01-28 06:17:29 +04:00			`_tss:*:28:28::0:0:& pseudo-user:/var/tpm:/sbin/nologin`
Add _rtadvd user and group. Add a chroot dir for the _rtadvd user. Drop privs to the user _rtadvd after acquiring our socket. When rc.d/rtadvd starts or reloads, the rtadvd config file is copied into the chroot before starting or reloading rtadvd itself. Create a symlink from /var/run/rtadvd.dump to the chroot Inital idea from OpenBSD patch rtadvd.c r1.36 2013-07-09 13:34:58 +04:00			`_rtadvd:*:30:30::0:0:& pseudo-user:/var/chroot/rtadvd:/sbin/nologin`
unbound additions 2016-08-20 14:21:50 +03:00			`_unbound:*:32:32::0:0:& pseudo-user:/var/chroot/unbound:/sbin/nologin`
goodbye uucp 2006-11-12 04:20:00 +03:00			`uucp:*:66:1::0:0:UNIX-to-UNIX Copy:/nonexistent:/sbin/nologin`
make nobody's shell back /sbin/nologin. we'll use su -m for xdm. 2002-10-27 23:13:00 +03:00			`nobody:*:32767:39::0:0:Unprivileged user:/nonexistent:/sbin/nologin`