search

dslm4515 / Musl-LFS

Linux From Scratch using Musl as Libc
GNU General Public License v3.0
170 stars 21 forks source link

doc/3-Chroot/004-Create_Essential_Files_and_Links: `bin:bin` is deprecated since before Linux was even created #66

Closed takusuman closed 2 years ago

takusuman commented 2 years ago

The bin user is considered insecure and deprecated since mid-80's and the most part of UNIX security books/manuals recommend chowning it to root:wheel --- for instance, FreeBSD have been doing it since 1998 (https://github.com/freebsd/freebsd-src/commit/7faa559f34d8e1b2991d11274edcbe0bf3458336).

Related unix.SE thread: https://unix.stackexchange.com/a/485506

dslm4515 commented 2 years ago

That's good point.

In all my experience working and developing Linux/Unix systems, I never used or needed the bin user

dslm4515 commented 2 years ago

Fixed in commit 7f8506a7873083ffaad82584ac7b1b2c4416e1b7