Results 1 to 5 of 5

Thread: What is a "system" user, as opposed to a normal user.

  1. #1
    Join Date
    Dec 2007
    Beans
    176
    Distro
    Ubuntu 8.10 Intrepid Ibex

    What is a "system" user, as opposed to a normal user.

    According to the man page for "adduser," there are 2 types of users that can be added to a debian system. These 2 users are normal and system.

    Now what exactly is a system user? What is the purpose of this?

    Also, if I'm trying to install a specific antivirus software (say, clamav), and this software requires the existence of a clamav user account, now would this clamav username be a normal or a system type?

    Thanks in Advance.

  2. #2
    Join Date
    Nov 2006
    Location
    Belgium
    Beans
    3,025
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: What is a "system" user, as opposed to a normal user.

    a lot of unix/linux security depends on access to files and the right to execute them, and this is managed through user accounts. So programs need a user account in order to work. It's common to create a specific account for each application/service/daemon/... because this gives fine-grained control about what the program is allowed to do (eg don't mess with other programs' files)

    user accounts each have a unique number, the UID. It's common to give programs an account with a low number (lower than 1000), and real people an account with a higher number (1000 and up) so that programs that check user accounts can easily distinguish between them should they need to.

    It's also possible that some features are turned of for system accounts (eg no home dir, no interactive log-in, ...)

  3. #3
    Join Date
    May 2009
    Beans
    1

    Re: What is a "system" user, as opposed to a normal user.

    Quote Originally Posted by koenn View Post
    user accounts each have a unique number, the UID. It's common to give programs an account with a low number (lower than 1000), and real people an account with a higher number (1000 and up) so that programs that check user accounts can easily distinguish between them should they need to.
    That's the only difference? So if I changed my UID to, say, 99, that would make my account a system account? And if I changed the UID for a system account, say 'backup', to 1500, that would make it a normal account?

    Just making sure I understand.

    --
    Jim

  4. #4
    Join Date
    Jul 2008
    Location
    Netherlands
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: What is a "system" user, as opposed to a normal user.

    Quote Originally Posted by jimhyslop View Post
    That's the only difference?
    According to the adduser manual page, the system users go in the "nogroup" group (which is not the case on Ubuntu).

    But also, those system users are non privileged, have no password set (*) or disabled (!), and often use /bin/false or /bin/sh instead of /bin/bash.

  5. #5
    Join Date
    Nov 2006
    Location
    Belgium
    Beans
    3,025
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: What is a "system" user, as opposed to a normal user.

    Quote Originally Posted by albinootje View Post
    According to the adduser manual page, the system users go in the "nogroup" group (which is not the case on Ubuntu).

    But also, those system users are non privileged, have no password set (*) or disabled (!), and often use /bin/false or /bin/sh instead of /bin/bash.
    essentially, the difference is in how other programs treat those accounts. As in the exemples you give: the adduser program creates them so they can't be used for interactive logins, and/or doesn't create a home dir, etc.
    It's my understanding that they're essentially just accounts, i.e. records in /etc/passwd, but distinguishable by their (arbitrary) low UID, and can therefore be given special threatment by other programs, by package maintainers, by distro maintainers, by sysadmins, ...

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •