# accounts.conf -- the SYSTEM accounts this machine needs, declared once.
#
# A package user cannot create an account: every book "Configuring" section
# that says `useradd` is refused during the build and recorded, and then
# somebody types it out of the failure box hours later, from memory. This is
# where it gets written down instead, and `cfg accounts` creates them before
# the package that wants them.
#
# One line per account:
#
#     name:uid:gid:home:shell:comment
#
#   name     the account, and the group of the same name, both created
#   uid/gid  a number, or `-` for "let the system pick a system id"
#   home     `-` for none (a daemon account usually needs none)
#   shell    `-` becomes /bin/false: a system account does not log in
#   comment  what it is for, so the next reader does not have to guess
#
# THE NUMBERS MATTER WHEN THEY MATTER.  The LFS and BLFS books fix a few uids
# on purpose so that a file copied between systems keeps its owner -- sshd is
# 50 in the book, and changing it here does not make the book wrong, it makes
# this machine different.  Where the book gives no number, use `-`.
#
# These are created, never removed: this file adding a line is a request, and
# deleting one is not.  Remove an account by hand, deliberately, once you know
# nothing owns its files:
#     find / -xdev -user <name> | head

sshd:50:50:/var/lib/sshd:-:OpenSSH privilege separation