serenity/Base/etc/group

root:x:0:
wheel:x:1:anon
tty:x:2:
phys:x:3:window,anon
audio:x:4:anon
utmp:x:5:
lookup:x:10:anon
window:x:13:anon
users:x:100:anon
Add getgrent() family of functions. 2018-11-06 21:27:51 +00:00			`root:x:0:`
Meta: Scale back overly informal user-facing strings We were getting a little overly memey in some places, so let's scale things back to business-casual. Informal language is fine in comments, commits and debug logs, but let's keep the runtime nice and presentable. :^) 2020-06-17 16:20:28 +00:00			`wheel:x:1:anon`
Base: Add "tty" group and make /dev/tty* be root:tty mode 610 This fixes an issue where anyone could snoop on the virtual consoles. 2020-01-04 11:40:12 +00:00			`tty:x:2:`
Base: Add anon user to the phys group This allows anon to shut down and reboot the system. Fixes #775. 2020-03-03 15:39:06 +00:00			`phys:x:3:window,anon`
Base: Add an "audio" group that gets to write to /dev/audio 2020-01-04 12:25:13 +00:00			`audio:x:4:anon`
utmpupdate: Add a program for updating /var/run/utmp To keep track of ongoing terminal sessions, we now have a sort-of traditional /var/run/utmp file, like other Unix systems. Unlike other Unix systems however, ours is of course JSON. :^) The /bin/utmpupdate program is used to update the file, which is not writable by regular user accounts. This helper program is set-GID "utmp". 2020-09-06 14:10:27 +00:00			`utmp:x:5:`
Base: Remove unnecessary UID separation of multi-process Browser After looking closely at this, I realized that we've been running all the service processes under separate user accounts even though there's actually no need to. Since we already use pledge() and unveil() to limit the scope and access of these programs, separating them to another UID doesn't achieve anything meaningful. So let's bring them back to the "anon" user account and simplify things. Programs affected: - ImageDecoder - RequestServer - WebContent - WebSocket Longer term, I'd like for all of these to get spawned for the current desktop user somehow, possibly by some kind of session manager, or perhaps by the Browser program itself. But for now they remain under SystemServer's control. 2021-05-06 10:54:01 +00:00			`lookup:x:10:anon`
NotificationServer: Remove unnecessary UID separation This process is already sandboxed to the point where the UID doesn't matter, so let's just stop having the separate "notify" user. 2021-06-06 14:11:06 +00:00			`window:x:13:anon`
Rename the default user to "anon" and give him a home directory. 2019-01-30 19:40:41 +00:00			`users:x:100:anon`