Security Basics mailing list archives

Re: Unneeded User Accounts


From: "David M. Fetter" <david.fetter () fetterconsulting com>
Date: Wed, 11 Jun 2003 11:48:12 -0700

I believe most of them are useless. The best way to check would be to simply do a `last` and grep for usernames in init scripts. Some of them might be necessary for starting some processes, but most can be removed. You might also notice that the majority of them have the account locked and some with no shell which would prevent them from logging in of course.

sjm wrote:
Does anyone know of a way to find out which system accounts are not in use and can be deleted? RedHat installs alot of them like 'games' some of which I know aren't needed on my web server, others I am not sure about.

/*-----------------------------*\
|                               |
|    Steve McKinney             |
|    ARDI - Web Programmer      |
|    sjm () porter appstate edu    |
|    (828) 262-6553             |
|                               |
\*-----------------------------*/


---------------------------------------------------------------------------
----------------------------------------------------------------------------






--
David M. Fetter - http://www.fetterconsulting.com/

"The world is full of power and energy and a person can go far by just skimming off a tiny bit of it." Neal Stephenson - Snow Crash


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: