Add _dhcpcd user and group

Add the "nvmm" group, and make nvmm_init() public. Sent to tech-kern@ a few
days ago.

branches: 1.34.16;
add nsd

unbound additions

branches: 1.32.10;
Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36

Move _gpio gid below 100 per mrg's request.

Rename the 'gpio' group to '_gpio' as new group names should start with an
underscore. While here, fix the awk script to properly expand such group
names.

Add a group 'gpio' and create gpio(4) device nodes under /dev with
mode 664 and group ownership set to 'gpio'. This allows controlled access
to specifically enabled gpio pins to members of the gpio group. See
gpioctl(8), and, gpio(4) for details.

branches: 1.28.6;
- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.

branches: 1.27.2;
Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.

branches: 1.22.4;
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd

Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".

branches: 1.20.2; 1.20.4;
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!

remove some more smmsp for sendmail.

add _rwhod user (and group)

Add _pflogd group.

branches: 1.16.2;
remove "auth" group mistakenly added

GID for authpf (72 was picked so that we can NFS-share with openbsd)

Remove unused user and group "news" as discussed on "tech-userlevel".

typo in last

uid/gid for sendmail 8.12.x.
disallow chroot priv accounts from being used for ftp.

dig sshd uid/gid, and /var/empty, for sshd privilege separation

- add "ntpd" user (homedir: /var/chroot/ntpd) and "ntpd" group, for use by
future work to support a chroot(8)ed ntpd
- move /var/named -> /var/chroot/named for consistency with ntpd

remove `ingres' user & group; we have never shipped with ingres in the
base distribution, and packages that need a specific user & group can
create it.

add named pseudo-user & group

useradd defaults to using the 'users' group, so add one.

branches: 1.6.2;
add postfix uid/gid, maildrop gid

add a mail group with no members for anyone who wants to try setgid mail

add two new groups in Lite's

don't forget the trailing ':'. pointed out by Andreas Schulz
<ats@g386bsd.first.gmd.de> via rgrimes

removed bill and lynne from wheel

branches: 1.1.1;
Initial revision

Add the "nvmm" group, and make nvmm_init() public. Sent to tech-kern@ a few
days ago.

add nsd

unbound additions

branches: 1.32.10;
Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36

Move _gpio gid below 100 per mrg's request.

Rename the 'gpio' group to '_gpio' as new group names should start with an
underscore. While here, fix the awk script to properly expand such group
names.

Add a group 'gpio' and create gpio(4) device nodes under /dev with
mode 664 and group ownership set to 'gpio'. This allows controlled access
to specifically enabled gpio pins to members of the gpio group. See
gpioctl(8), and, gpio(4) for details.

branches: 1.28.6;
- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.

branches: 1.27.2;
Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.

branches: 1.22.4;
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd

Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".

branches: 1.20.2; 1.20.4;
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!

remove some more smmsp for sendmail.

add _rwhod user (and group)

Add _pflogd group.

branches: 1.16.2;
remove "auth" group mistakenly added

GID for authpf (72 was picked so that we can NFS-share with openbsd)

Remove unused user and group "news" as discussed on "tech-userlevel".

typo in last

uid/gid for sendmail 8.12.x.
disallow chroot priv accounts from being used for ftp.

dig sshd uid/gid, and /var/empty, for sshd privilege separation

- add "ntpd" user (homedir: /var/chroot/ntpd) and "ntpd" group, for use by
future work to support a chroot(8)ed ntpd
- move /var/named -> /var/chroot/named for consistency with ntpd

remove `ingres' user & group; we have never shipped with ingres in the
base distribution, and packages that need a specific user & group can
create it.

add named pseudo-user & group

useradd defaults to using the 'users' group, so add one.

branches: 1.6.2;
add postfix uid/gid, maildrop gid

add a mail group with no members for anyone who wants to try setgid mail

add two new groups in Lite's

don't forget the trailing ':'. pointed out by Andreas Schulz
<ats@g386bsd.first.gmd.de> via rgrimes

removed bill and lynne from wheel

branches: 1.1.1;
Initial revision

add nsd

unbound additions

Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36

Move _gpio gid below 100 per mrg's request.

Rename the 'gpio' group to '_gpio' as new group names should start with an
underscore. While here, fix the awk script to properly expand such group
names.

Add a group 'gpio' and create gpio(4) device nodes under /dev with
mode 664 and group ownership set to 'gpio'. This allows controlled access
to specifically enabled gpio pins to members of the gpio group. See
gpioctl(8), and, gpio(4) for details.

branches: 1.28.6;
- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.

branches: 1.27.2;
Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.

branches: 1.22.4;
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd

Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".

branches: 1.20.2; 1.20.4;
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!

remove some more smmsp for sendmail.

add _rwhod user (and group)

Add _pflogd group.

branches: 1.16.2;
remove "auth" group mistakenly added

GID for authpf (72 was picked so that we can NFS-share with openbsd)

Remove unused user and group "news" as discussed on "tech-userlevel".

typo in last

uid/gid for sendmail 8.12.x.
disallow chroot priv accounts from being used for ftp.

dig sshd uid/gid, and /var/empty, for sshd privilege separation

- add "ntpd" user (homedir: /var/chroot/ntpd) and "ntpd" group, for use by
future work to support a chroot(8)ed ntpd
- move /var/named -> /var/chroot/named for consistency with ntpd

remove `ingres' user & group; we have never shipped with ingres in the
base distribution, and packages that need a specific user & group can
create it.

add named pseudo-user & group

useradd defaults to using the 'users' group, so add one.

branches: 1.6.2;
add postfix uid/gid, maildrop gid

add a mail group with no members for anyone who wants to try setgid mail

add two new groups in Lite's

don't forget the trailing ':'. pointed out by Andreas Schulz
<ats@g386bsd.first.gmd.de> via rgrimes

removed bill and lynne from wheel

branches: 1.1.1;
Initial revision

unbound additions

Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36

Move _gpio gid below 100 per mrg's request.

Rename the 'gpio' group to '_gpio' as new group names should start with an
underscore. While here, fix the awk script to properly expand such group
names.

Add a group 'gpio' and create gpio(4) device nodes under /dev with
mode 664 and group ownership set to 'gpio'. This allows controlled access
to specifically enabled gpio pins to members of the gpio group. See
gpioctl(8), and, gpio(4) for details.

branches: 1.28.6;
- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.

branches: 1.27.2;
Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.

branches: 1.22.4;
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd

Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".

branches: 1.20.2; 1.20.4;
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!

remove some more smmsp for sendmail.

add _rwhod user (and group)

Add _pflogd group.

branches: 1.16.2;
remove "auth" group mistakenly added

GID for authpf (72 was picked so that we can NFS-share with openbsd)

Remove unused user and group "news" as discussed on "tech-userlevel".

typo in last

uid/gid for sendmail 8.12.x.
disallow chroot priv accounts from being used for ftp.

dig sshd uid/gid, and /var/empty, for sshd privilege separation

- add "ntpd" user (homedir: /var/chroot/ntpd) and "ntpd" group, for use by
future work to support a chroot(8)ed ntpd
- move /var/named -> /var/chroot/named for consistency with ntpd

remove `ingres' user & group; we have never shipped with ingres in the
base distribution, and packages that need a specific user & group can
create it.

add named pseudo-user & group

useradd defaults to using the 'users' group, so add one.

branches: 1.6.2;
add postfix uid/gid, maildrop gid

add a mail group with no members for anyone who wants to try setgid mail

add two new groups in Lite's

don't forget the trailing ':'. pointed out by Andreas Schulz
<ats@g386bsd.first.gmd.de> via rgrimes

removed bill and lynne from wheel

branches: 1.1.1;
Initial revision

Add _rtadvd user and group.
Add a chroot dir for the _rtadvd user.
Drop privs to the user _rtadvd after acquiring our socket.
When rc.d/rtadvd starts or reloads, the rtadvd config file is copied
into the chroot before starting or reloading rtadvd itself.
Create a symlink from /var/run/rtadvd.dump to the chroot

Inital idea from OpenBSD patch rtadvd.c r1.36

Move _gpio gid below 100 per mrg's request.

Rename the 'gpio' group to '_gpio' as new group names should start with an
underscore. While here, fix the awk script to properly expand such group
names.

Add a group 'gpio' and create gpio(4) device nodes under /dev with
mode 664 and group ownership set to 'gpio'. This allows controlled access
to specifically enabled gpio pins to members of the gpio group. See
gpioctl(8), and, gpio(4) for details.

branches: 1.28.6;
- add _tss user for tcsd, and needed directories for TrouSerS.
This is all unused as of now because the trousers is not connected to
the build yet.

branches: 1.27.2;
Rename the _atf user to _tests. The _atf name will get obsoleted if/when
we migrate to Kyua (atf v2), so it's better to use a generic name that does
not depend on the specific implementation. Also, this user has not gone
out yet into any stable release, so we can easily rename it.

Suggested by jruoho@.

Make tcpdump(8) to drop root privileges and chroot(2) by default.

Add the _atf user and group to be able to run unprivileged tests automatically
without having to manually tweak the 'unprivileged-user' setting. Suggested
by pooka@.

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add httpd to the build. Add _httpd to passwd and groups and postinstall.
Add /var/www to mtree, add example line to inetd.conf.

branches: 1.22.4;
For sdpd(8), change default user/group from nobody/nobody to _sdpd/_sdpd

Let timedc use the dedicated account "_timedc" for dropping privileges
instead of abusing the account "nobody".

branches: 1.20.2; 1.20.4;
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!

remove some more smmsp for sendmail.

add _rwhod user (and group)

Add _pflogd group.

branches: 1.16.2;
remove "auth" group mistakenly added

GID for authpf (72 was picked so that we can NFS-share with openbsd)

Remove unused user and group "news" as discussed on "tech-userlevel".

typo in last

uid/gid for sendmail 8.12.x.
disallow chroot priv accounts from being used for ftp.

dig sshd uid/gid, and /var/empty, for sshd privilege separation

- add "ntpd" user (homedir: /var/chroot/ntpd) and "ntpd" group, for use by
future work to support a chroot(8)ed ntpd
- move /var/named -> /var/chroot/named for consistency with ntpd

remove `ingres' user & group; we have never shipped with ingres in the
base distribution, and packages that need a specific user & group can
create it.

add named pseudo-user & group

useradd defaults to using the 'users' group, so add one.

branches: 1.6.2;
add postfix uid/gid, maildrop gid

add a mail group with no members for anyone who wants to try setgid mail

add two new groups in Lite's

don't forget the trailing ':'. pointed out by Andreas Schulz
<ats@g386bsd.first.gmd.de> via rgrimes

removed bill and lynne from wheel

branches: 1.1.1;
Initial revision

import 4.4BSD-Lite

initial import of 386bsd-0.1 sources

Pull up revision 1.7 (requested by abs):
Create ``users'' group for the benefit of useradd.

Pull up following revision(s) (requested by jnemeth in ticket #1898):
etc/master.passwd: revision 1.34, 1.35 via patch
etc/group: revision 1.20
dist/pf/libexec/ftp-proxy/ftp-proxy.c: revision 1.12 via patch
distrib/notes/common/main: patch
PR 30870: Add user ``_proxy'' and make pf's ftp-proxy use it.
Initial patch by rivo nurges, thanks!
add all the proper fields to _proxy

Pull up revision 1.17 (requested by peter in ticket #134):
Add _pflogd group.

Catch up with 4.0 RC3

Pull up following revision(s) (requested by xtraeme in ticket #930):
etc/group: revision 1.22
etc/defaults/rc.conf: revision 1.85
etc/master.passwd: revision 1.38
usr.sbin/sdpd/sdpd.8: revision 1.2
usr.sbin/sdpd/sdpd.8: revision 1.3
share/man/man5/rc.conf.5: revision 1.113
etc/rc.d/sdpd: revision 1.2
usr.sbin/sdpd/server.c: revision 1.3
usr.sbin/postinstall/postinstall: revision 1.38
usr.sbin/sdpd/server.h: revision 1.2
usr.sbin/sdpd/main.c: revision 1.2
usr.sbin/sdpd/main.c: revision 1.3
Add an option to permit members of a specific group to register services, in
order to lower the barrier for users of bluetooth devices which may need to
query services on the local host.
change default user/group from nobody/nobody to _sdpd/_sdpd

sync with HEAD

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")

sync with head

Rebase to HEAD as of a few days ago.

resync from head