user owned groups

Dan Nelson dnelson at allantgroup.com
Wed May 11 10:26:29 PDT 2005


In the last episode (May 11), David Bear said:
> Apoligies in advance but searches based on keyword were too
> voluminous.
> 
> I've noticed that with some Linux distributions the default behavior
> of creating user accounts created the group with the same name as the
> user, and made that group the primary group of the user. There are
> other linux distributions that the throw all users into a default
> group named users.
> 
> Freebsd does the first. Assuming that Freebsd was designed to be more
> secure from the start, I am assuming that creating a group for each
> user was also deemed a security plus.
> 
> Are there any documents explaining the reasoning behind this?

Both systems should be equally secure.  The BSD way is a bit more
flexible in that you can allow user A access to user B's home
directories by putting user A in group B.  Good for allowing teachers
access to student directories (but only the ones taking their classes),
or delegating access while an employee is on vacation.

-- 
	Dan Nelson
	dnelson at allantgroup.com


More information about the freebsd-questions mailing list