diff --git a/share/man/man5/passwd.5 b/share/man/man5/passwd.5 --- a/share/man/man5/passwd.5 +++ b/share/man/man5/passwd.5 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd April 19, 2026 +.Dd April 28, 2026 .Dt PASSWD 5 .Os .Sh NAME @@ -426,6 +426,7 @@ .Xr netgroup 5 , .Xr nsswitch.conf 5 , .Xr groups 7 , +.Xr users 7 , .Xr adduser 8 , .Xr nologin 8 , .Xr pw 8 , diff --git a/share/man/man7/Makefile b/share/man/man7/Makefile --- a/share/man/man7/Makefile +++ b/share/man/man7/Makefile @@ -36,7 +36,8 @@ stdint.7 \ sticky.7 \ tracing.7 \ - tuning.7 + tuning.7 \ + users.7 MLINKS= intro.7 miscellaneous.7 MLINKS+= growfs.7 growfs_fstab.7 @@ -52,6 +53,9 @@ MLINKS+= c.7 c23.7 MLINKS+= c.7 c2y.7 MLINKS+= groups.7 wheel.7 +MLINKS+= users.7 root.7 +MLINKS+= users.7 toor.7 +MLINKS+= users.7 nobody.7 .if ${MK_INET} != "no" MAN+= networking.7 diff --git a/share/man/man7/groups.7 b/share/man/man7/groups.7 --- a/share/man/man7/groups.7 +++ b/share/man/man7/groups.7 @@ -26,7 +26,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd April 19, 2026 +.Dd April 28, 2026 .Dt GROUPS 7 .Os .Sh NAME @@ -39,7 +39,8 @@ .Bl -tag -width "realtime" .It Em wheel Users authorized to elevate themselves to the super-user privileges of -the root user, meaning uid\~0. +the root user, meaning uid\~0; see +.Xr users 7 . Normally the .Em wheel group has gid\~0. @@ -335,6 +336,7 @@ .Xr id 1 , .Xr newgrp 1 , .Xr group 5 , +.Xr users 7 , .Xr pw 8 .Sh HISTORY The diff --git a/share/man/man7/intro.7 b/share/man/man7/intro.7 --- a/share/man/man7/intro.7 +++ b/share/man/man7/intro.7 @@ -91,6 +91,8 @@ .It Xr tuning 7 general advice on tuning .Fx +.It Xr users 7 +standard user account names .El .Sh SEE ALSO .Xr man 1 , diff --git a/share/man/man7/users.7 b/share/man/man7/users.7 new file mode 100644 --- /dev/null +++ b/share/man/man7/users.7 @@ -0,0 +1,250 @@ +.\" $NetBSD: users.7,v 1.5 2020/04/02 20:57:20 roy Exp $ +.\" +.\" SPDX-License-Identifier: BSD-2-Clause +.\" +.\" Copyright (c) 2020 The NetBSD Foundation, Inc. +.\" All rights reserved. +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS +.\" ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED +.\" TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +.\" PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS +.\" BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +.\" CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +.\" SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS +.\" INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +.\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +.\" POSSIBILITY OF SUCH DAMAGE. +.\" +.Dd April 26, 2026 +.Dt USERS 7 +.Os +.Sh NAME +.Nm users +.Nd standard user account names +.Sh DESCRIPTION +A standard +.Fx +installation has the following user account names: +.Bl -tag -width "auditdistd" +.It Em root +The super-user, uid 0, with the highest administrative privileges. +Normally not used for login directly, only via +.Xr su 1 +or equivalent by users in the +.Em wheel +group. +.Pp +The secondary group of the +.Em root +user is +.Em operator . +See +.Xr groups 7 . +.It Em toor +Like +.Em root , +this is the super-user with uid 0, but with no secondary group +memberships. +.Pp +Historically, +.Em root +had a login shell of +.Pa /bin/csh +while +.Em toor +had a login shell of +.Pa /bin/sh . +However, today both default to +.Pa /bin/sh . +This user is not used for anything in +.Fx ; +it is purely a convenience for actual users. +Usually a login shell for +.Em toor +is set to a user's preferred +interactive shell to not commit changes to the +.Em root +user, since a bad shell set for +.Em root +may cause problems and even lock user out of the super-user account. +.It Em daemon +Historic user for general daemonic activity; see +.Xr daemon 8 . +.Pp +Owner of +.Pa /var/msgs ; +see +.Xr msgs 1 . +Used only by +.Xr rpcbind 8 , +with the +.Fl s +flag. +.It Em operator +Used as owner of +.Pa /var/db/entropy; see +.Xr save-entropy 8 . +.Pp +See also +.Em operator +group in +.Xr groups 7 . +.It Em bin +Historic user. +Unused in modern +.Fx . +.It Em tty +Historic user. +Unused in modern +.Fx . +See +.Em tty +group in +.Xr groups 7 . +.It Em kmem +Historic user. +Unused in modern +.Fx . +.Pp +See +.Em kmem +group in +.Xr groups 7 . +.It Em games +Owner of high-score files and other shared files for games; see +.Xr intro 6 . +.It Em news +Historic user for news subsystem. +Unused in modern +.Fx . +.It Em man +Historic user used as owner of manual pages; see +.Xr man 1 . +Unused in modern +.Fx . +.It Em sshd +Pseudo-user for use by the +.Xr sshd 8 +secure shell daemon. +.It Em smmsp +Pseudo-user for use by the +.Xr sendmail 8 +if no non-root users were configured for running it. +.Pp +The name of the user means "SendMail Message Submission Program". +.It Em mailnull +Pseudo-user for use by the +.Xr sendmail 8 +as its default user. +.It Em bind +Historic user used to be used by the +.Xr named 8 +Internet domain name server, which has been removed from the base system in +.Fx 10.0 . +.It Em unbound +Pseudo-user for use by the +.Xr local-unbound 8 +recursive DNS resolver. +.It Em proxy +Pseudo-user for use by the +.Xr ftp-proxy 8 +proxy daemon with packet filters such as +.Xr pf 4 . +.It Em _pflogd +Pseudo-user for use by the +.Xr pflogd 8 +log daemon with the +.Xr pf 4 +packet filter. +.It Em _dhcp +Pseudo-user for use by the +.Xr dhclient 8 +DHCP Client. +.It Em pop +Historic user used as the post office owner. +Unused in modern +.Fx . +.It Em auditdistd +Pseudo-user for use by the +.Xr auditdistd 8 +audit daemon. +.It Em www +Historic user for accessing World Wide Web. +Unused in modern +.Fx . +.It Em ntpd +Pseudo-user for use by the +.Xr ntpd 8 +network time protocol daemon. +.It Em _ypldap +Pseudo-user for use by the +.Xr ypldap 8 +daemon. +.It Em hast +Pseudo-user for use by the +Highly Available Storage daemon +.Xr hastd 8 . +.It Em tests +Pseudo-user for use by the +automatic tests that request to run unprivileged. +See +.Xr tests 7 . +.It Em nobody +Traditional pseudo-user used for dropping privileges. +Modern practice is to assign to each different daemon its own separate +pseudo-user account and group so that if one daemon is compromised it +does not compromise all the other daemons. +.El +.Pp +All new standard +.Fx +pseudo-user account names should begin with an underscore +.Sq "_" +to distinguish them from accounts that real users might add, and should +have a primary group of the same name; real users should accordingly +avoid such account names. +.Sh FILES +.Bl -tag -width "/usr/src/etc/master.passwd" -compact +.It Pa /etc/passwd +File where user names and IDs (UIDs) are stored along with other information. +See +.Xr passwd 5 +for more details. +.It Pa /usr/src/etc/master.passwd +Information about standard users in the base system. +This file has the same +.Xr passwd 5 +format as +.Pa /etc/passwd . +.El +.Sh SEE ALSO +.Xr chpass 1 , +.Xr id 1 , +.Xr logname 1 , +.Xr passwd 1 , +.Xr su 1 , +.Xr users 1 , +.Xr whoami 1 , +.Xr passwd 5 , +.Xr groups 7 , +.Xr adduser 8 , +.Xr pw 8 , +.Xr rmuser 8 +.Sh HISTORY +The +.Nm +manual page appeared in +.Nx 10.0 +and +.Fx 15.1 . diff --git a/usr.bin/id/id.1 b/usr.bin/id/id.1 --- a/usr.bin/id/id.1 +++ b/usr.bin/id/id.1 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd April 19, 2026 +.Dd April 28, 2026 .Dt ID 1 .Os .Sh NAME @@ -181,7 +181,8 @@ .Sh SEE ALSO .Xr groups 1 , .Xr who 1 , -.Xr groups 7 +.Xr groups 7 , +.Xr users 7 .Sh STANDARDS The .Nm diff --git a/usr.bin/id/whoami.1 b/usr.bin/id/whoami.1 --- a/usr.bin/id/whoami.1 +++ b/usr.bin/id/whoami.1 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd June 6, 1993 +.Dd April 28, 2026 .Dt WHOAMI 1 .Os .Sh NAME @@ -50,4 +50,5 @@ .Sh EXIT STATUS .Ex -std .Sh SEE ALSO -.Xr id 1 +.Xr id 1 , +.Xr users 7 diff --git a/usr.bin/logname/logname.1 b/usr.bin/logname/logname.1 --- a/usr.bin/logname/logname.1 +++ b/usr.bin/logname/logname.1 @@ -28,7 +28,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd June 9, 1993 +.Dd April 28, 2026 .Dt LOGNAME 1 .Os .Sh NAME @@ -55,7 +55,8 @@ .Sh SEE ALSO .Xr who 1 , .Xr whoami 1 , -.Xr getlogin 2 +.Xr getlogin 2 , +.Xr users 7 .Sh STANDARDS The .Nm diff --git a/usr.bin/passwd/passwd.1 b/usr.bin/passwd/passwd.1 --- a/usr.bin/passwd/passwd.1 +++ b/usr.bin/passwd/passwd.1 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd February 14, 2014 +.Dd April 28, 2026 .Dt PASSWD 1 .Os .Sh NAME @@ -208,6 +208,7 @@ .Xr login 1 , .Xr login.conf 5 , .Xr passwd 5 , +.Xr users 7 , .Xr kerberos 8 , .Xr kpasswdd 8 , .Xr pam_passwdqc 8 , diff --git a/usr.bin/su/su.1 b/usr.bin/su/su.1 --- a/usr.bin/su/su.1 +++ b/usr.bin/su/su.1 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd June 11, 2025 +.Dd April 28, 2026 .Dt SU 1 .Os .Sh NAME @@ -240,6 +240,7 @@ .Xr login.conf 5 , .Xr passwd 5 , .Xr environ 7 , +.Xr users 7 , .Xr pam_group 8 .Sh HISTORY A diff --git a/usr.bin/users/users.1 b/usr.bin/users/users.1 --- a/usr.bin/users/users.1 +++ b/usr.bin/users/users.1 @@ -25,7 +25,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd January 21, 2010 +.Dd April 28, 2026 .Dt USERS 1 .Os .Sh NAME @@ -46,7 +46,8 @@ .Xr finger 1 , .Xr last 1 , .Xr who 1 , -.Xr getutxent 3 +.Xr getutxent 3 , +.Xr users 7 .Sh HISTORY The .Nm diff --git a/usr.sbin/adduser/adduser.8 b/usr.sbin/adduser/adduser.8 --- a/usr.sbin/adduser/adduser.8 +++ b/usr.sbin/adduser/adduser.8 @@ -27,7 +27,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd April 19, 2026 +.Dd April 28, 2026 .Dt ADDUSER 8 .Os .Sh NAME @@ -446,6 +446,7 @@ .Xr passwd 5 , .Xr shells 5 , .Xr groups 7 , +.Xr users 7 , .Xr pw 8 , .Xr pwd_mkdb 8 , .Xr rmuser 8 , diff --git a/usr.sbin/adduser/rmuser.8 b/usr.sbin/adduser/rmuser.8 --- a/usr.sbin/adduser/rmuser.8 +++ b/usr.sbin/adduser/rmuser.8 @@ -24,7 +24,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd May 10, 2002 +.Dd April 28, 2026 .Dt RMUSER 8 .Os .Sh NAME @@ -170,6 +170,7 @@ .Xr passwd 1 , .Xr group 5 , .Xr passwd 5 , +.Xr users 7 , .Xr adduser 8 , .Xr pw 8 , .Xr pwd_mkdb 8 , diff --git a/usr.sbin/pw/pw.8 b/usr.sbin/pw/pw.8 --- a/usr.sbin/pw/pw.8 +++ b/usr.sbin/pw/pw.8 @@ -22,7 +22,7 @@ .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF .\" SUCH DAMAGE. .\" -.Dd April 19, 2026 +.Dd April 28, 2026 .Dt PW 8 .Os .Sh NAME @@ -1105,6 +1105,7 @@ .Xr passwd 5 , .Xr pw.conf 5 , .Xr groups 7 , +.Xr users 7 , .Xr pwd_mkdb 8 , .Xr vipw 8 , .Xr zfs 8