On 19 Jun at 22:10, Theo de Raadt <dera...@openbsd.org> wrote:
> Mischa <obs...@high5.nl> wrote:
> 
> > > 2. Change the default owner group to root:_vmd.
> > > 
> > > It would be possible to define a hardcoded group, or use group _vmd,
> > > but this doesn't feel right. 
> > 
> > Why would using _vmd not work?
> > Wouldn't that be the same for other daemons?
> > Or wouldn't these be used to assign other users to it?
> > One which comes to mind is _ladvd, albeit not in base.
> 
> Because it exists for a different purpose.  A security purpose.
> Good lord.

Makes perfect sense.

Mischa

Reply via email to