LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-08-2007, 06:24 PM   #1
abefroman
Senior Member
 
Registered: Feb 2004
Location: lost+found
Distribution: CentOS
Posts: 1,430

Rep: Reputation: 55
Which of these default users can I delete?


Which of these default users can I delete?

bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0perator:/root:/sbin/nologin
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
avahi:x:70:70:Avahi daemon:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
 
Old 12-08-2007, 06:57 PM   #2
reddazz
LQ Guru
 
Registered: Nov 2003
Location: N. E. England
Distribution: Fedora, CentOS, Debian
Posts: 16,298

Rep: Reputation: 77
Why do you want to delete them? They are all important system users and deleting them may have undesirable effects on your system.
 
Old 12-16-2007, 01:22 AM   #3
gd2shoe
Member
 
Registered: Jun 2004
Location: Northern CA
Distribution: Debian
Posts: 835

Rep: Reputation: 49
That partially depends on what services you are willing to do without, or compromized. Example, "sshd" could be removed if you really don't intend to have an ssh server running. It could be configured to use another account instead, but it is there for a reason. There are too many things done as "nobody" on too many systems.

Why would you want to delete them anyways? You could try locking them with "usermod -L" and see what breaks? ("usermod -U" to unlock) But even then I wouldn't delete them.
 
Old 12-18-2007, 08:02 PM   #4
sundialsvcs
LQ Guru
 
Registered: Feb 2004
Location: SE Tennessee, USA
Distribution: Gentoo, LFS
Posts: 10,659
Blog Entries: 4

Rep: Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941Reputation: 3941
I would advise against removing any of these entries. "You know not what you do."

As you see, nearly all of these entries are /sbin/nologin. That's a dummy "shell" that simply prints an error-message that "you can't log in." (You can actually run this program at the command-line to see what it says.) Because of this fact, indeed, no one can ever "log in" using any of these IDs.

(The shutdown and sync "users" are operator-convenience tools that would allow system-operators to be able to do things by "logging on." Rarely used.)
 
Old 12-23-2007, 04:01 AM   #5
abefroman
Senior Member
 
Registered: Feb 2004
Location: lost+found
Distribution: CentOS
Posts: 1,430

Original Poster
Rep: Reputation: 55
Quote:
Originally Posted by sundialsvcs View Post
(The shutdown and sync "users" are operator-convenience tools that would allow system-operators to be able to do things by "logging on." Rarely used.)
So I could remove those 2?
 
Old 12-24-2007, 03:38 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
The complete answer is: no.
 
Old 12-25-2007, 08:03 AM   #7
Lotharster
Member
 
Registered: Nov 2005
Posts: 144

Rep: Reputation: 18
Why would you want to delete system users?

It won't make your computer more secure, it won't make your computer faster --
You might just break someting if you don't know what you are doing.

So why bother?

Last edited by Lotharster; 12-25-2007 at 08:12 AM.
 
Old 12-25-2007, 09:23 PM   #8
v00d00101
Member
 
Registered: Jun 2003
Location: UK
Distribution: Devuan Beowulf
Posts: 514
Blog Entries: 1

Rep: Reputation: 37
Personally i think he should delete them one by one. His system will be totally trashed, but he will learn through experience, not to do it again.

Its all fine to say dont do it, but he doesnt learn the lesson unless he does it.
 
Old 12-25-2007, 09:41 PM   #9
townie
Member
 
Registered: Oct 2007
Distribution: Ubuntu 8.10 beta and Debian etch
Posts: 75

Rep: Reputation: 15
if ur attempting to make ur system faster there are better more sensible ways of doing it like using smaller programs, also removing unused programs also closing unused start up programs. there are stacks of tweaks but removing default user is not one of them, they are there for a reason.
 
Old 12-25-2007, 09:43 PM   #10
DragonSlayer48DX
Registered User
 
Registered: Dec 2006
Posts: 1,454
Blog Entries: 1

Rep: Reputation: 75
Quote:
Originally Posted by v00d00101 View Post
Personally i think he should delete them one by one. His system will be totally trashed, but he will learn through experience, not to do it again.

Its all fine to say dont do it, but he doesnt learn the lesson unless he does it.
Sorry, but I disagree. If that's the only way to learn, then why have a place like LQ at all? Are you saying all the people who volunteer their time and effort helping others here are useless??

You are right in that his system most likely will be trashed. That's why he considered asking first, and that's why so many friendly, caring people have bothered to respond with the answers that you see above. That's why we're here.

Last edited by DragonSlayer48DX; 12-25-2007 at 09:48 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
default groups - which are ok to delete? dcyfer Slackware 2 01-30-2007 09:20 PM
can i delete all the users except...... wangjinyi Linux - Security 10 10-23-2005 09:04 PM
How to set a Gnome theme as default for all users and future users ? MDesigner Linux - Newbie 1 06-28-2004 11:12 AM
Is it safe to delete default nobody user? dunkyb Linux - General 2 03-16-2003 12:38 PM
how do i delete users? ShawnD Linux - General 9 07-22-2002 10:06 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration