From b0402396e046923f7927711b0cdfceebf1e9b53b Mon Sep 17 00:00:00 2001 From: florian <> Date: Tue, 27 Sep 2016 05:31:37 +0000 Subject: [PATCH] Add unprivileged user for traceroute. Input deraadt@ OK benno@, sthen@ --- src/etc/group | 1 + src/etc/mail/aliases | 3 ++- src/etc/master.passwd | 1 + 3 files changed, 4 insertions(+), 1 deletion(-) diff --git a/src/etc/group b/src/etc/group index 7c050ef0..e823310e 100644 --- a/src/etc/group +++ b/src/etc/group @@ -21,6 +21,7 @@ _fingerd:*:33: _sshagnt:*:34: _x11:*:35: utmp:*:45: +_traceroute:*:50: _ping:*:51: _rebound:*:52: _unbound:*:53: diff --git a/src/etc/mail/aliases b/src/etc/mail/aliases index ea13fc47..3cb44a77 100644 --- a/src/etc/mail/aliases +++ b/src/etc/mail/aliases @@ -1,5 +1,5 @@ # -# $OpenBSD: aliases,v 1.58 2016/09/26 17:42:09 otto Exp $ +# $OpenBSD: aliases,v 1.59 2016/09/27 05:31:37 florian Exp $ # # Aliases in this file will NOT be expanded in the header from # Mail, but WILL be visible over networks or from /usr/libexec/mail.local. @@ -65,6 +65,7 @@ _snmpd: /dev/null _spamd: /dev/null _syslogd: /dev/null _tcpdump: /dev/null +_traceroute: /dev/null _tftpd: /dev/null _unbound: /dev/null _vmd: /dev/null diff --git a/src/etc/master.passwd b/src/etc/master.passwd index 80be75a9..82aa4e96 100644 --- a/src/etc/master.passwd +++ b/src/etc/master.passwd @@ -9,6 +9,7 @@ _rstatd:*:30:30::0:0:rpc.rstatd:/var/empty:/sbin/nologin _rusersd:*:32:32::0:0:rpc.rusersd:/var/empty:/sbin/nologin _fingerd:*:33:33::0:0:fingerd:/var/empty:/sbin/nologin _x11:*:35:35::0:0:X Server:/var/empty:/sbin/nologin +_traceroute:*:50:50::0:0:traceroute privdrop user:/var/empty:/sbin/nologin _ping:*:51:51::0:0:ping privdrop user:/var/empty:/sbin/nologin _rebound:*:52:52::0:0:Rebound DNS Daemon:/var/empty:/sbin/nologin _unbound:*:53:53:unbound:0:0:Unbound Daemon:/var/unbound:/sbin/nologin