DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=sender:message-id:date:from:user-agent:mime-version:to:subject
         :references:in-reply-to:x-enigmail-version:content-type
         :content-transfer-encoding;
        b=POeJgHr9WDNRSKGdXBJi6Xpf6koN6IxkZbN7yxkriZfLAEfzHeN+hjPoI4sPWzv5j2
         BsOo0vQH7hYny4IQy7hkcwFjGm0rWXm4Mz85XbmMCNrA72cxrQbwROj22lqocPSuB1io
         6WZNTnnopOS9KKnu5lbG62n7c2QK38GUvwZ9o=
Sender: =?UTF-8?Q?Timo_Ter=C3=A4s?= <timo.teras@gmail.com>
Message-ID: <4CFE5E40.6030705@iki.fi>
Date: Tue, 07 Dec 2010 18:18:08 +0200
From: =?UTF-8?B?VGltbyBUZXLDpHM=?= <timo.teras@iki.fi>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6
Precedence: list
MIME-Version: 1.0
To: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] system groups
References: <20101207151943.60bfb747@alpinelinux.org> <1291737766.7439.8.camel@ncopa-desktop.nor.wtbts.net>
In-Reply-To: <1291737766.7439.8.camel@ncopa-desktop.nor.wtbts.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

On 12/07/2010 06:02 PM, Natanael Copa wrote:
> On Tue, 2010-12-07 at 15:19 +0000, Natanael Copa wrote:
>> Hi,
>>
>> We have introduced a special system group with gid 700. All users in
>> this group will have permission to see all processes, network info and
>> kernel symbols. The purpose of this is to have monitorig software like
>> zabbix and nagios agents running as users that are in this group.
>>
>> I will update alpine-baselayout (which has not been touched for years)
>> with a new group, called 'readproc', which will be used for gid 700.
> 
> I should have picked a lower gid. Seems like 30 is free. Everybody ok
> with me updating the kernel to use GID=30 and update
> alpine-baselayout's /etc/group to hold 'readproc:x:30:'?

Yes, that sounds better. Usually gid 100-1000 can be assigned by
"addgroup --system". We would not want this GID to get autoassigned on
systems where the entry does not exist.

GID=30 sounds ok.

- Timo



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---