d87d6793f0
Add a chroot dir for the _rtadvd user. Drop privs to the user _rtadvd after acquiring our socket. When rc.d/rtadvd starts or reloads, the rtadvd config file is copied into the chroot before starting or reloading rtadvd itself. Create a symlink from /var/run/rtadvd.dump to the chroot Inital idea from OpenBSD patch rtadvd.c r1.36
24 lines
1.4 KiB
Plaintext
24 lines
1.4 KiB
Plaintext
root::0:0::0:0:Charlie &:/root:/bin/sh
|
|
toor:*:0:0::0:0:Bourne-again Superuser:/root:/bin/sh
|
|
daemon:*:1:1::0:0:The devil himself:/:/sbin/nologin
|
|
operator:*:2:5::0:0:System &:/usr/guest/operator:/sbin/nologin
|
|
bin:*:3:7::0:0:Binaries Commands and Source:/:/sbin/nologin
|
|
games:*:7:13::0:0:& pseudo-user:/usr/games:/sbin/nologin
|
|
postfix:*:12:12::0:0:& pseudo-user:/var/spool/postfix:/sbin/nologin
|
|
named:*:14:14::0:0:& pseudo-user:/var/chroot/named:/sbin/nologin
|
|
ntpd:*:15:15::0:0:& pseudo-user:/var/chroot/ntpd:/sbin/nologin
|
|
sshd:*:16:16::0:0:& pseudo-user:/var/chroot/sshd:/sbin/nologin
|
|
_pflogd:*:18:18::0:0:& pseudo-user:/var/chroot/pflogd:/sbin/nologin
|
|
_rwhod:*:19:19::0:0:& pseudo-user:/var/rwho:/sbin/nologin
|
|
_proxy:*:21:21::0:0:Proxy Services:/nonexistent:/sbin/nologin
|
|
_timedc:*:22:22::0:0:& pseudo-user:/nonexistent:/sbin/nologin
|
|
_sdpd:*:23:23::0:0:& pseudo-user:/nonexistent:/sbin/nologin
|
|
_httpd:*:24:24::0:0:& pseudo-user:/var/www:/sbin/nologin
|
|
_mdnsd:*:25:25::0:0:& pseudo-user:/nonexistent:/sbin/nologin
|
|
_tests:*:26:26::0:0:& pseudo-user:/nonexistent:/sbin/nologin
|
|
_tcpdump:*:27:27::0:0:& pseudo-user:/var/chroot/tcpdump:/sbin/nologin
|
|
_tss:*:28:28::0:0:& pseudo-user:/var/tpm:/sbin/nologin
|
|
_rtadvd:*:30:30::0:0:& pseudo-user:/var/chroot/rtadvd:/sbin/nologin
|
|
uucp:*:66:1::0:0:UNIX-to-UNIX Copy:/nonexistent:/sbin/nologin
|
|
nobody:*:32767:39::0:0:Unprivileged user:/nonexistent:/sbin/nologin
|