Changes in group

9d6049d5 - etc: remove leftover leading empty comments, blank lines

Tue, 22 Aug 2023 18:03:28 +0000

etc: remove leftover leading empty comments, blank linesRemove leftover empty leading comments/blank lines that had beenspacers between $FreeBSD$ and the following content in config filesin src/etc.Reviewed by: impDifferential Revision: https://reviews.freebsd.org/D41548 List of files: /freebsd-14.2/etc/group

d0b2dbfa - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 17:55:03 +0000

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/etc/group

d0f1f382 - Reserve u2f group for FIDO/U2F key support (SSH, etc.)

Fri, 18 Feb 2022 18:13:20 +0000

Reserve u2f group for FIDO/U2F key support (SSH, etc.)We have FIDO/U2F support in the base system now, so reserve a group IDfor it (maching the security/u2f-devd port).Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D34341 List of files: /freebsd-14.2/etc/group

a9545eed - Add idle priority scheduling privilege group to MAC/priority

Fri, 10 Dec 2021 01:35:38 +0000

Add idle priority scheduling privilege group to MAC/priorityAdd an idletime user group that allows non-root users to run processeswith idle scheduling priority. Privileges are granted by a MAC policy inthe mac_priority module. For this purpose, the kernel privilegePRIV_SCHED_IDPRIO was added to sys/priv.h (kernel module ABI change).Deprecate the system wide sysctl(8) knobsecurity.bsd.unprivileged_idprio which lets any user run idle priorityprocesses, regardless of context. While the knob is still working, it ismarked as deprecated in the description and in the man pages.MFC after: 2 weeksDifferential revision: https://reviews.freebsd.org/D33338 List of files: /freebsd-14.2/etc/group

bf2fa8d9 - MAC/priority module for realtime privilege group

Sat, 04 Dec 2021 16:17:29 +0000

MAC/priority module for realtime privilege groupThis is a MAC policy module that grants scheduling privileges based ongroup membership. Users or processes in the group realtime (gid 47) areallowed to run threads and processes with realtime scheduling priority.For timing-sensitive, low-latency software like audio/jack, running withrealtime priority helps to avoid stutter and gaps.PR: 239125MFC after: 2 weeksDifferential revision: https://reviews.freebsd.org/D33191 List of files: /freebsd-14.2/etc/group

cfe7aad9 - Create and use a tests group for the tests user.

Fri, 27 Mar 2020 16:05:37 +0000

Create and use a tests group for the tests user.No user (except nobody) should be a member of the nobody group.Reported by: rgrimesReviewed by: rgrimesMFC after: 3 daysSponsored by: DARPADifferential Revision: https://reviews.freebsd.org/D24199 List of files: /freebsd-14.2/etc/group

45a13fd8 - Move back group, master.passwd and shells to etc directory

Thu, 23 May 2019 18:37:05 +0000

Move back group, master.passwd and shells to etc directoryUse the .PATH mechanism instead so keep installing them from lib/libc/genWhile here revert 347961 and 347893 which are no longer neededDiscussed with: manuTested by: manuok manu@ List of files: /freebsd-14.2/etc/group

3496c981 - Make it possible to run ntpd as a non-root user, add ntpd uid and gid.

Thu, 19 Jul 2018 23:55:29 +0000

Make it possible to run ntpd as a non-root user, add ntpd uid and gid.Code analysis and runtime analysis using truss(8) indicate that the onlyprivileged operations performed by ntpd are adjusting system time, and(re-)binding to privileged UDP port 123. These changes add a new mac(4)policy module, mac_ntpd(4), which grants just those privileges to anyprocess running with uid 123.This also adds a new user and group, ntpd:ntpd, (uid:gid 123:123), and makesthem the owner of the /var/db/ntp directory, so that it can be used as alocation where the non-privileged daemon can write files such as thedriftfile, and any optional logfile or stats files.Because there are so many ways to configure ntpd, the question of how toconfigure it to run without root privs can be a bit complex, so that will beaddressed in a separate commit. These changes are just what's required togrant the limited subset of privs to ntpd, and the small change to ntpd toprevent it from exiting with an error if running as non-root.Differential Revision: https://reviews.freebsd.org/D16281 List of files: /freebsd-14.2/etc/group

1cf38d9e - Fix regression introduced on r293801.

Wed, 27 Jan 2016 06:28:56 +0000

Fix regression introduced on r293801.The UID/GID 93 is in using by jaber on PORTS, we will useUID/GID 160 for ypldap(8).Reported by: antoineApproved by: bapt (mentor)Differential Revision: https://reviews.freebsd.org/D5062 List of files: /freebsd-14.2/etc/group

34c7eb57 - Add a new group named 'video' with the id of 44. And make drm create

Sun, 09 Aug 2015 12:58:56 +0000

Add a new group named 'video' with the id of 44. And make drm createdevices in /dev/dri/ with this new group.This will allow ports and users to more easily access to these devicesfor OpenGL and OpenCL support.Reviewed by: dumbbell@Approved by: dumbbell@Differential Revision: https://reviews.freebsd.org/D1260 List of files: /freebsd-14.2/etc/group

ec0e2ac6 - Remove most of the ATF tools and the _atf user.

Sat, 12 Oct 2013 06:06:53 +0000

Remove most of the ATF tools and the _atf user.This is necessary because ATF is deprecated and it will be replaced by Kyua.Submitted by: jmmv@netbsd.orgReviewed by: Garrett CooperApproved by: re List of files: /freebsd-14.2/etc/group

8f8790cd - Build and install the Unbound caching DNS resolver daemon.

Sun, 15 Sep 2013 14:51:23 +0000

Build and install the Unbound caching DNS resolver daemon.Approved by: re (blanket) List of files: /freebsd-14.2/etc/group

c175365c - Add ATF to the build. This is may be a bit rought around the egdes,

Mon, 22 Oct 2012 01:18:41 +0000

Add ATF to the build. This is may be a bit rought around the egdes,but committing it helps to get everyone on the same page and makessure we make progress.Tinderbox breakages that are the result of this commit are entirelythe committer's fault -- in other words: buildworld testing on amd64only.Credits follow:Submitted by: Garrett Cooper Sponsored by: Isilon SystemsBased on work by: keramida@Thanks to: gnn@, mdf@, mlaier@, sjg@Special thanks to: keramida@ List of files: /freebsd-14.2/etc/group

3468e4ce - Add 'hast' user and 'hast' group that will be used by hastd (and maybe hastctl)

Fri, 28 Jan 2011 22:28:12 +0000

Add 'hast' user and 'hast' group that will be used by hastd (and maybe hastctl)to drop privileges.MFC after: 1 week List of files: /freebsd-14.2/etc/group

3213dc84 - Create group ftp by default. This is gid 14 as this is the historical

Mon, 11 Jun 2007 18:36:39 +0000

Create group ftp by default. This is gid 14 as this is the historicalid used by sysinstall when enabling anonymous FTP.Change the default group used by sysinstall for setting up anonymous FTPfrom operator to ftp; there is no reason to use operator and there arepotential security issues when doing so.PR: 93284Approved by: ru (mentor)Reviewed by: simon List of files: /freebsd-14.2/etc/group

cd573a85 - Assign gid 77 to audit instead of gid 73. The ports group list did not

Sun, 05 Feb 2006 19:34:09 +0000

Assign gid 77 to audit instead of gid 73. The ports group list did notinclude '73', which was assigned in a ports passwd entry to ircservices.Pointed out by: ceri List of files: /freebsd-14.2/etc/group

bbcf7c36 - Allocate an 'audit' group, membership in which will grant the audit

Sun, 05 Feb 2006 18:04:39 +0000

Allocate an 'audit' group, membership in which will grant the auditreview right by virtue of read file permission on /var/audit and itscontents.Obtained from: TrustedBSD Project List of files: /freebsd-14.2/etc/group

7217408a - Add _dhcp user/group as required by the OpenBSD dhclient.

Mon, 06 Jun 2005 20:19:56 +0000

Add _dhcp user/group as required by the OpenBSD dhclient. List of files: /freebsd-14.2/etc/group

8ee2ac9e - Add "privsep" user/group _pflogd:_pflogd (64:64) to make pflogd(8) work

Wed, 23 Jun 2004 01:32:28 +0000

Add "privsep" user/group _pflogd:_pflogd (64:64) to make pflogd(8) workagain. This user/group is not required for install* targets, hence do notadd them to CHECK_UIDS/CHECK_GIDS in Makefile.inc1 (no need to annoypeople).Discussed-on: -current List of files: /freebsd-14.2/etc/group

be3e0526 - Add trailing collon

Wed, 10 Mar 2004 15:04:29 +0000

Add trailing collonNoticed by: dwhiteApproved by: bms(mentor) List of files: /freebsd-14.2/etc/group