<div dir="ltr"><br><br><div class="gmail_quote">2011/1/24 Michael Ben-Nes <span dir="ltr"><<a href="mailto:michael@epoch.co.il">michael@epoch.co.il</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div dir="ltr">Hi everyone,<br><br>I been asked to remove the adm group from one of the system I manage.<br><br>What is the purpose of this group?<br>Will the removal contribute to the general security of the OS?<br><br>
</div>
</blockquote><div><br>Generally used for administrators in their non-privileged user, in order to perform administrative jobs that relate to monitoring, reading logs from /var/log - etc. <br><br>So you could put the admin user in this group, and every log file with adm as the group would be readable by him (and chmod the logs to 640) - and not to all the users on the system.<br>
<br>HTH,<br><br>-- Shimi<br><br> <br></div></div><br></div>