LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-14-2005, 07:23 PM   #1
NNP
Member
 
Registered: Nov 2004
Distribution: Debian/Ubuntu
Posts: 156

Rep: Reputation: 30
Adding a user for clamav


Hey, im installing clamav and in the documentation there's this instruction

Quote:
# useradd -g clamav -s /bin/false -c "Clam AntiVirus" clamav

Consult a system manual if your OS has not groupadd and useradd utilities. The account should be locked in /etc/passwd or /etc/shadow.
I typed that in but i have a few questions.

1)How is the password set in this?
2)In the GUI system admin it says beside the user clamav that its status is locked. What does that mean
3)Where it says the account should be locked in /etc/password or /etc/shadow, what part of the command did this?

Thanks,

NNP
 
Old 05-14-2005, 10:13 PM   #2
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,284

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
1) The password is set to be some invalid field so the user can't login.
2) It means the account is not allowed to login.
3) The -s /bin/false flag set the account's shell to /bin/false. As this is not a valid shell, it effectively locks the account.
 
Old 05-14-2005, 10:17 PM   #3
NNP
Member
 
Registered: Nov 2004
Distribution: Debian/Ubuntu
Posts: 156

Original Poster
Rep: Reputation: 30
so whats the point of making the account?

Do i not have to switch to the clamav user to start clamd?

btw, whats the point of clamd. I cant figure out why i have to configure ports etc for it as i wont be accessing it remotely.
 
Old 05-14-2005, 11:01 PM   #4
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,284

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
Stuff can run as a particular user without that user being required to login. Many daemons will start as root to perform priviliged operations (bind to priviliged ports, write state files, etc.) and then drop to a less priviliged user such as the one you created. Obviously, these users have no reasons to be allowed to login.

Spamassassin, like a lot of *nix software, is designed flexibly so it can be used in large and small environments, hence clamd runs as a daemon so you can separate the machine that does spam filtering from your mail server. If you have a big site with high mailtraffic, this can be critically important. If you don't need the functionality, set clamd to bind only to the local interface and/or firewall off the ports it uses to all but local traffic.
 
Old 05-15-2005, 07:56 AM   #5
NNP
Member
 
Registered: Nov 2004
Distribution: Debian/Ubuntu
Posts: 156

Original Poster
Rep: Reputation: 30
will this bind it only to my own PC. I edited the clamd.conf file

Code:
# TCP address.
# By default we bind to INADDR_ANY, probably not wise.
# Enable the following to provide some degree of protection
# from the outside world.
# Default: disabled
TCPAddr 127.0.0.1
 
Old 05-15-2005, 12:42 PM   #6
btmiller
Senior Member
 
Registered: May 2004
Location: In the DC 'burbs
Distribution: Arch, Scientific Linux, Debian, Ubuntu
Posts: 4,284

Rep: Reputation: 371Reputation: 371Reputation: 371Reputation: 371
That should do it, since 127.0.0.1 is the loopback interface.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
adding a new user Cinematography MEPIS 5 07-25-2005 10:19 PM
Adding second user jnhannah Linux - Security 1 06-27-2004 03:50 PM
adding user paschim Linux - Newbie 4 06-27-2004 06:05 AM
Adding a new user Yohhan Linux - Software 3 01-23-2003 08:17 PM
user adding sathu Linux - Newbie 1 02-12-2002 06:19 AM


All times are GMT -5. The time now is 03:59 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration