FreeBSD Super User root and login category

Super User Root

Superuser is the owner of Unix, has all the rights, so it is also very dangerous, improper use of super user power can cause irreparable damage to the system. Even though you don't need to share the system with other people for the FreeBSD system you use, do not use root to do day-to-day work. Typically, administrators operate only with ordinary accounts under normal circumstances and use superuser privileges only when necessary to perform system administration.

The standard way to become superuser from a normal user is to use the SU command:

$ su

Password:

#

When the root password is entered correctly, it becomes a superuser, and the system prompts from the standard "$" to the root-specific "#" prompt.

To use the SU command to become the root user on the FreeBSD, you should not only know the root password, but also have to go through special settings, otherwise you will not be able to successfully use this command. This is because FreeBSD has stricter restrictions on the users performing the SU command, and users who can use the SU command must belong to the wheel group (the base group of root, the group ID is 0), otherwise they cannot become root by this command. Therefore, you need to edit the group settings file/etc/group to join the administrative members who require Superuser power to the wheel group.

If you only want the user to perform part of the operation that requires Superuser power, and do not want to divulge the root password, it is simpler to use sudo, but this is outside the basic system and requires a different set of administrative tools.

Login Category

Starting with the 4.3 BSD net/2, BSD Unix introduced a classification mechanism for login categories to manage the resources, billing, and environment settings that users use. The FreeBSD system uses the data described in/etc/login.conf to divide the user into different login categories according to the login environment, mandatory resource limits, and accounting management, and each user's logon category is recorded in the user's settings in/ETC/MASTER.PASSWD.

Default:\

: cputime=infinity:\

:d atasize-cur=64m:\

: stacksize-cur=64m:\

: memorylocked-cur=10m:\

: memoryuse-cur=100m:\

: filesize=infinity:\

: coredumpsize=infinity:\

: maxproc-cur=64:\

: openfiles-cur=64:\

:p riority=0:\

: requirehome@:\

: umask=022:\

: tc=auth-defaults: