mirror of
https://git.proxmox.com/git/systemd
synced 2025-08-03 23:13:04 +00:00
102 lines
8.4 KiB
HTML
102 lines
8.4 KiB
HTML
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>sysusers.d</title><meta name="generator" content="DocBook XSL Stylesheets V1.78.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><style>
|
|
a.headerlink {
|
|
color: #c60f0f;
|
|
font-size: 0.8em;
|
|
padding: 0 4px 0 4px;
|
|
text-decoration: none;
|
|
visibility: hidden;
|
|
}
|
|
|
|
a.headerlink:hover {
|
|
background-color: #c60f0f;
|
|
color: white;
|
|
}
|
|
|
|
h1:hover > a.headerlink, h2:hover > a.headerlink, h3:hover > a.headerlink, dt:hover > a.headerlink {
|
|
visibility: visible;
|
|
}
|
|
</style><a href="index.html">Index </a>·
|
|
<a href="systemd.directives.html">Directives </a>·
|
|
<a href="../python-systemd/index.html">Python </a>·
|
|
<a href="../libudev/index.html">libudev </a>·
|
|
<a href="../libudev/index.html">gudev </a><span style="float:right">systemd 215</span><hr><div class="refentry"><a name="sysusers.d"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>sysusers.d — Declarative allocation of system users and groups</p></div><div class="refsynopsisdiv"><h2>Synopsis</h2><p><code class="filename">/usr/lib/sysusers.d/*.conf</code></p></div><div class="refsect1"><a name="idm214170527280"></a><h2 id="Description">Description<a class="headerlink" title="Permalink to this headline" href="#Description">¶</a></h2><p><span class="command"><strong>systemd-sysusers</strong></span> uses the
|
|
files from <code class="filename">/usr/lib/sysusers.d/</code>
|
|
to create system users and groups at package
|
|
installation or boot time. This tool may be used for
|
|
allocating system users and groups only, it is not
|
|
useful for creating non-system users and groups, as it
|
|
accessed <code class="filename">/etc/passwd</code> and
|
|
<code class="filename">/etc/group</code> directly, bypassing
|
|
any more complex user database, for example any
|
|
database involving NIS or LDAP.</p></div><div class="refsect1"><a name="idm214170523056"></a><h2 id="File Format">File Format<a class="headerlink" title="Permalink to this headline" href="#File%20Format">¶</a></h2><p>Each file shall be named in the style of
|
|
<code class="filename"><em class="replaceable"><code>package</code></em>.conf</code>.</p><p>All files are sorted by their filename in
|
|
lexicographic order, regardless of which of the
|
|
directories they reside in. If multiple files specify
|
|
the same user or group, the entry in the file with the
|
|
lexicographically earliest name will be applied, all
|
|
all other conflicting entries will be logged as
|
|
errors. Users and groups are
|
|
processed in the order they are listed.</p><p>The file format is one line per user or group
|
|
containing name, ID and GECOS field description:</p><pre class="programlisting"># Type Name ID GECOS
|
|
u httpd 440 "HTTP User"
|
|
u authd /usr/bin/authd "Authorization user"
|
|
g input - -
|
|
m authd input</pre><div class="refsect2"><a name="idm214170518848"></a><h3 id="Type">Type<a class="headerlink" title="Permalink to this headline" href="#Type">¶</a></h3><p>The type consists of a single
|
|
letter. The following line types are
|
|
understood:</p><div class="variablelist"><dl class="variablelist"><dt id="u"><span class="term"><code class="varname">u</code></span><a class="headerlink" title="Permalink to this term" href="#u">¶</a></dt><dd><p>Create a
|
|
system user and group of the
|
|
specified name should they not
|
|
exist yet. The user's primary
|
|
group will be set to the group
|
|
bearing the same name. The
|
|
user's shell will be set to
|
|
<code class="filename">/sbin/login</code>,
|
|
the home directory to
|
|
<code class="filename">/</code>. The
|
|
account will be created
|
|
disabled, so that logins are
|
|
not allowed.</p></dd><dt id="g"><span class="term"><code class="varname">g</code></span><a class="headerlink" title="Permalink to this term" href="#g">¶</a></dt><dd><p>Create a
|
|
system group of the specified
|
|
name should it not exist
|
|
yet. Note that
|
|
<code class="varname">u</code>
|
|
implicitly create a matching
|
|
group. The group will be
|
|
created with no password
|
|
set.</p></dd><dt id="m"><span class="term"><code class="varname">m</code></span><a class="headerlink" title="Permalink to this term" href="#m">¶</a></dt><dd><p>Add a user to
|
|
a group. If the user or group
|
|
are not existing yet, they
|
|
will be implicitly
|
|
created.</p></dd></dl></div></div><div class="refsect2"><a name="idm214174461584"></a><h3 id="Name">Name<a class="headerlink" title="Permalink to this headline" href="#Name">¶</a></h3><p>The name field specifies the user or
|
|
group name. It should be be shorter than 256
|
|
characters and avoid any non-ASCII characters,
|
|
and not begin with a numeric character. It is
|
|
strongly recommended to pick user and group
|
|
names that are unlikely to clash with normal
|
|
users created by the administrator. A good
|
|
scheme to guarantee this is by prefixing all
|
|
system and group names with the underscore,
|
|
and avoiding too generic names.</p><p>For <code class="varname">m</code> lines this
|
|
field should contain the user name to add to a
|
|
group.</p></div><div class="refsect2"><a name="idm214174458848"></a><h3 id="ID">ID<a class="headerlink" title="Permalink to this headline" href="#ID">¶</a></h3><p>For <code class="varname">u</code> and
|
|
<code class="varname">g</code> the numeric 32bit UID or
|
|
GID of the user/group. Do not use IDs 65535 or
|
|
4294967295, as they have special placeholder
|
|
meanings. Specify "-" for automatic UID/GID
|
|
allocation for the user or
|
|
group. Alternatively, specify an absolute path
|
|
in the file system. In this case the UID/GID
|
|
is read from the path's owner/group. This is
|
|
useful to create users whose UID/GID match the
|
|
owners of pre-existing files (such as SUID or
|
|
SGID binaries).</p><p>For <code class="varname">m</code> lines this
|
|
field should contain the group name to add to
|
|
a user to.</p></div><div class="refsect2"><a name="idm214174454560"></a><h3 id="GECOS">GECOS<a class="headerlink" title="Permalink to this headline" href="#GECOS">¶</a></h3><p>A short, descriptive string for users to
|
|
be created, enclosed in quotation marks. Note
|
|
that this field may not contain colons.</p><p>Only applies to lines of type
|
|
<code class="varname">u</code> and should otherwise be
|
|
left unset.</p></div></div><div class="refsect1"><a name="idm214174452288"></a><h2 id="See Also">See Also<a class="headerlink" title="Permalink to this headline" href="#See%20Also">¶</a></h2><p>
|
|
<a href="systemd.html"><span class="citerefentry"><span class="refentrytitle">systemd</span>(1)</span></a>,
|
|
<a href="systemd-sysusers.html"><span class="citerefentry"><span class="refentrytitle">systemd-sysusers</span>(8)</span></a>
|
|
</p></div></div></body></html>
|