etc: welcome to the 21st century

etc/login.conf

-# login.conf - login class capabilities database.
-#
-# Remember to rebuild the database after each change to this file:
-#
-#	cap_mkdb /etc/login.conf
-#
-# This file controls resource limits, accounting limits and
-# default user environment settings.
-#
-# $FreeBSD: src/etc/login.conf,v 1.34.2.6 2002/07/02 20:06:18 dillon Exp $
-#
-
-# Default settings effectively disable resource limits, see the
-# examples below for a starting point to enable them.
-
-# defaults
-# These settings are used by login(1) by default for classless users
-# Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
-
-default:\
-	:passwd_format=md5:\
-	:copyright=/etc/COPYRIGHT:\
-	:welcome=/etc/motd:\
-	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
-	:path=/sbin /bin /usr/sbin /usr/bin /usr/local/sbin /usr/local/bin ~/bin:\
-	:nologin=/var/run/nologin:\
-	:cputime=unlimited:\
-	:datasize=unlimited:\
-	:stacksize=unlimited:\
-	:memorylocked=unlimited:\
-	:memoryuse=unlimited:\
-	:filesize=unlimited:\
-	:coredumpsize=unlimited:\
-	:openfiles=unlimited:\
-	:maxproc=unlimited:\
-	:sbsize=unlimited:\
-	:vmemoryuse=unlimited:\
-	:idletime=unlimited:\	
-	:priority=0:\
-	:ignoretime@:\
-	:umask=022:
-
-
-#
-# A collection of common class names - forward them all to 'default'
-# (login would normally do this anyway, but having a class name
-#  here suppresses the diagnostic)
-#
-standard:\
-	:tc=default:
-xuser:\
-	:tc=default:
-staff:\
-	:tc=default:
-daemon:\
-	:tc=default:
-news:\
-	:tc=default:
-dialer:\
-	:tc=default:
-
-#
-# Root can always login
-#
-# N.B.  login_getpwclass(3) will use this entry for the root account,
-#       in preference to 'default'.
-root:\
-	:ignorenologin:\
-	:tc=default:
-
-#
-# Russian Users Accounts. Setup proper environment variables.
-#
-russian|Russian Users Accounts:\
-	:charset=KOI8-R:\
-	:lang=ru_RU.KOI8-R:\
-	:tc=default:
-
-
-######################################################################
-######################################################################
-##
-## Example entries
-## 
-######################################################################
-######################################################################
-
-## Example defaults
-## These settings are used by login(1) by default for classless users
-## Note that entries like "cputime" set both "cputime-cur" and "cputime-max"
-#
-#default:\
-#	:cputime=infinity:\
-#	:datasize-cur=22M:\
-#	:stacksize-cur=8M:\
-#	:memorylocked-cur=10M:\
-#	:memoryuse-cur=30M:\
-#	:filesize=infinity:\
-#	:coredumpsize=infinity:\
-#	:maxproc-cur=64:\
-#	:openfiles-cur=64:\
-#	:priority=0:\
-#	:requirehome@:\
-#	:umask=022:\
-#	:tc=auth-defaults:
-#
-#
-##
-## standard - standard user defaults
-##
-#standard:\
-#	:copyright=/etc/COPYRIGHT:\
-#	:welcome=/etc/motd:\
-#	:setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
-#	:path=~/bin /bin /usr/bin /usr/local/bin:\
-#	:manpath=/usr/share/man /usr/local/man:\
-#	:nologin=/var/run/nologin:\
-#	:cputime=1h30m:\
-#	:datasize=8M:\
-#	:vmemoryuse=100M:\
-#	:stacksize=2M:\
-#	:memorylocked=4M:\
-#	:memoryuse=8M:\
-#	:filesize=8M:\
-#	:coredumpsize=8M:\
-#	:openfiles=24:\
-#	:maxproc=32:\
-#	:priority=0:\
-#	:requirehome:\
-#	:passwordtime=90d:\
-#	:umask=002:\
-#	:ignoretime@:\
-#	:tc=default:
-#
-#
-##
-## users of X (needs more resources!)
-##
-#xuser:\
-#	:manpath=/usr/share/man /usr/X11R6/man /usr/local/man:\
-#	:cputime=4h:\
-#	:datasize=12M:\
-#	:vmemoryuse=infinity:\
-#	:stacksize=4M:\
-#	:filesize=8M:\
-#	:memoryuse=16M:\
-#	:openfiles=32:\
-#	:maxproc=48:\
-#	:tc=standard:
-#
-#
-##
-## Staff users - few restrictions and allow login anytime
-##
-#staff:\
-#	:ignorenologin:\
-#	:ignoretime:\
-#	:requirehome@:\
-#	:accounted@:\
-#	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
-#	:umask=022:\
-#	:tc=standard:
-#
-#
-##
-## root - fallback for root logins
-##
-#root:\
-#	:path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
-#	:cputime=infinity:\
-#	:datasize=infinity:\
-#	:stacksize=infinity:\
-#	:memorylocked=infinity:\
-#	:memoryuse=infinity:\
-#	:filesize=infinity:\
-#	:coredumpsize=infinity:\
-#	:openfiles=infinity:\
-#	:maxproc=infinity:\
-#	:memoryuse-cur=32M:\
-#	:maxproc-cur=64:\
-#	:openfiles-cur=1024:\
-#	:priority=0:\
-#	:requirehome@:\
-#	:umask=022:\
-#	:tc=auth-root-defaults:
-#
-#
-##
-## Settings used by /etc/rc
-##
-#daemon:\
-#	:coredumpsize@:\
-#	:coredumpsize-cur=0:\
-#	:datasize=infinity:\
-#	:datasize-cur@:\
-#	:maxproc=512:\
-#	:maxproc-cur@:\
-#	:memoryuse-cur=64M:\
-#	:memorylocked-cur=64M:\
-#	:openfiles=1024:\
-#	:openfiles-cur@:\
-#	:stacksize=16M:\
-#	:stacksize-cur@:\
-#	:tc=default:
-#
-#
-##
-## Settings used by news subsystem
-##
-#news:\
-#	:path=/usr/local/news/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\
-#	:cputime=infinity:\
-#	:filesize=128M:\
-#	:datasize-cur=64M:\
-#	:stacksize-cur=32M:\
-#	:coredumpsize-cur=0:\
-#	:maxmemorysize-cur=128M:\
-#	:memorylocked=32M:\
-#	:maxproc=128:\
-#	:openfiles=256:\
-#	:tc=default:
-#
-#
-##
-## The dialer class should be used for a dialup PPP/SLIP accounts
-## Welcome messages/news suppressed
-##
-#dialer:\
-#	:hushlogin:\
-#	:requirehome@:\
-#	:cputime=unlimited:\
-#	:filesize=2M:\
-#	:datasize=2M:\
-#	:stacksize=4M:\
-#	:coredumpsize=0:\
-#	:memoryuse=4M:\
-#	:memorylocked=1M:\
-#	:maxproc=16:\
-#	:openfiles=32:\
-#	:tc=standard:
-#
-#
-##
-## Site full-time 24/7 PPP/SLIP connections
-## - no time accounting, restricted to access via dialin lines
-##
-#site:\
-#	:ignoretime:\
-#	:passwordtime@:\
-#	:refreshtime@:\
-#	:refreshperiod@:\
-#	:sessionlimit@:\
-#	:autodelete@:\
-#	:expireperiod@:\
-#	:graceexpire@:\
-#	:gracetime@:\
-#	:warnexpire@:\
-#	:warnpassword@:\
-#	:idletime@:\
-#	:sessiontime@:\
-#	:daytime@:\
-#	:weektime@:\
-#	:monthtime@:\
-#	:warntime@:\
-#	:accounted@:\
-#	:tc=dialer:\
-#	:tc=staff:
-#
-#
-##
-## Example standard accounting entries for subscriber levels
-##
-#
-#subscriber|Subscribers:\
-#	:accounted:\
-#	:refreshtime=180d:\
-#	:refreshperiod@:\
-#	:sessionlimit@:\
-#	:autodelete=30d:\
-#	:expireperiod=180d:\
-#	:graceexpire=7d:\
-#	:gracetime=10m:\
-#	:warnexpire=7d:\
-#	:warnpassword=7d:\
-#	:idletime=30m:\
-#	:sessiontime=4h:\
-#	:daytime=6h:\
-#	:weektime=40h:\
-#	:monthtime=120h:\
-#	:warntime=4h:\
-#	:tc=standard:
-#
-#
-##
-## Subscriber accounts. These accounts have their login times
-## accounted and have access limits applied.
-##
-#subppp|PPP Subscriber Accounts:\
-#	:tc=dialer:\
-#	:tc=subscriber:
-#
-#
-#subslip|SLIP Subscriber Accounts:\
-#	:tc=dialer:\
-#	:tc=subscriber:
-#
-#
-#subshell|Shell Subscriber Accounts:\
-#	:tc=subscriber:
-#
-##
-## If you want some of the accounts to use traditional UNIX DES based
-## password hashes.
-##
-#des_users:\
-#	:passwd_format=des:\
-#	:tc=default:

etc/master.passwd

-# $FreeBSD: src/etc/master.passwd,v 1.39 2004/08/01 21:33:47 markm Exp $
-#
-root:$1$9ZCIHWSF$/6MpmsZXSQbkARathg3cX1:0:0::0:0:Charlie &:/root:/bin/sh
-toor:*:0:0::0:0:Bourne-again Superuser:/root:
-daemon:*:1:1::0:0:Owner of many system processes:/root:/usr/sbin/nologin
-operator:*:2:5::0:0:System &:/:/usr/sbin/nologin
-bin:*:3:7::0:0:Binaries Commands and Source:/:/usr/sbin/nologin
-tty:*:4:65533::0:0:Tty Sandbox:/:/usr/sbin/nologin
-kmem:*:5:65533::0:0:KMem Sandbox:/:/usr/sbin/nologin
-games:*:7:13::0:0:Games pseudo-user:/usr/games:/usr/sbin/nologin
-news:*:8:8::0:0:News Subsystem:/:/usr/sbin/nologin
-man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
-sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
-smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin
-mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
-bind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologin
-unbound:*:59:59::0:0:Unbound DNS Resolver:/var/unbound:/usr/sbin/nologin
-proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
-_pflogd:*:64:64::0:0:pflogd privsep user:/var/empty:/usr/sbin/nologin
-www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
-nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin
-dhcpd:*:1002:1002::0:0:DHCP Daemon:/nonexistent:/sbin/nologin
-admin:$1$9ZCIHWSF$/6MpmsZXSQbkARathg3cX1:0:0::0:0:Admin User:/root:/bin/sh
-_dhcp:*:65:65::0:0:dhcp programs:/var/empty:/usr/sbin/nologin
-_isakmpd:*:68:68::0:0:isakmpd privsep:/var/empty:/sbin/nologin
-uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
-pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin
-_ntp:*:123:123::0:0:NTP daemon:/var/empty:/sbin/nologin
-_relayd:*:913:913::0:0:Relay Daemon:/var/empty:/usr/sbin/nologin

etc/passwd

-root:*:0:0:Charlie &:/root:/bin/sh
-toor:*:0:0:Bourne-again Superuser:/root:
-daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
-operator:*:2:5:System &:/:/usr/sbin/nologin
-bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin
-tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin
-kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin
-games:*:7:13:Games pseudo-user:/usr/games:/usr/sbin/nologin
-news:*:8:8:News Subsystem:/:/usr/sbin/nologin
-man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
-sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
-smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin
-mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
-bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin
-unbound:*:59:59:Unbound DNS Resolver:/var/unbound:/usr/sbin/nologin
-proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
-_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin
-uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
-pop:*:68:6::0:0:Post Office Owner:/nonexistent:/usr/sbin/nologin
-www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
-nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin
-distcc:*:1001:1001:Distcc:/home/distcc:/sbin/nologin
-dhcpd:*:1002:1002:DHCP Daemon:/nonexistent:/sbin/nologin
-admin:*:0:0:Admin User:/home/admin:/bin/sh
-_ntp:*:123:123:NTP daemon:/var/empty:/sbin/nologin
-_relayd:*:913:913:Relay Daemon:/var/empty:/usr/sbin/nologin