FW: [PATCH] look for uid greater than 499, not 500
Steve Grubb
sgrubb at redhat.com
Tue Dec 10 14:58:09 UTC 2013
On Tuesday, December 10, 2013 09:03:42 AM Trevor Vaughan wrote:
> For RHEL6, I thought that system accounts were as follows:
>
> 1 - 499 => Vendor System
> 500 - 1000 => Local System
> 1001 - 65534 => Users
Nope. The authoritative reference is /etc/logins.def. The UID_MIN is 500. I
had this bumped up in F16, which RHEL7 will inherit from.
https://lists.fedoraproject.org/pipermail/devel/2011-May/151663.html
-Steve
> In this case, are we considering local system as non-system (we are, I just
> wanted to make sure that it was clear).
>
> This numbering is reinforced by the SSSD default configuration.
>
> On Sat, Nov 30, 2013 at 11:44 AM, Dave Smith <anondev at scapsecurityguides.org
> > wrote:
> > Great catch, please push!
> >
> > On 11/27/2013 04:31 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
> >
> > The original prose check ignored UID 500. The associated OVAL includes
> > UID 500, though.
> >
> >
> > Regards,
> > --
> > Leland Steinke, Security+
> > DISA FSO Technical Support Contractor
> > tapestry technologies, Inc717-267-5797 (DSN
> > 570)leland.j.steinke.ctr at mail.mil (gov't)lsteinke at tapestrytech.com
> > (com'l)
> >
> >
> >
> >
> > _______________________________________________
> > scap-security-guide mailing
> > listscap-security-guide at lists.fedorahosted.orghttps://lists.fedorahosted.
> > org/mailman/listinfo/scap-security-guide
> >
> >
> >
> > _______________________________________________
> > scap-security-guide mailing list
> > scap-security-guide at lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
More information about the scap-security-guide
mailing list