minimize use of root account

Christian Weisgerber naddy at
Fri Feb 19 22:20:08 UTC 2016

On 2016-02-19, "Ardie H. Hwang" <iam at> wrote:

> Adding a normal user to `operator` group allows the user to use `shutdown(1) command. `reboot(1)` is only for root, but it can be substituted with `shutdown -r now`.

Note that group operator also grants read access to disk devices.
(The idea is that such users can run backups with dump(8).)
This effectively means read access to any and all files on those
disks, regardless of the filesystem permissions.

Christian "naddy" Weisgerber                          naddy at

More information about the freebsd-questions mailing list