security audit requirements for default users

[AQadir_1]

Dear Gurus,

I have Redhat AS 4 running on rx6600 machines. During the audit following questions were raised, would be delighted if someone could help me in answering those:

Question # 1:

We observed that the Following Users are not attached to access control groups as appropriate:

1. tty,mem,kmem,man,games,gopher,dip,ftttp,lock,nobody,dbus,flopy,vcsa,nscd,rpm,haldaemon,utmp,slocate,sshd,rpc,rpcuser,nfsnobody,mailnull,smmsp,pcap,xfs,ntp.

And Also the Following generic users accounts are member of powerful user groups:

 2.bin,daemon,adm,lp,sync,shutdown,halt,mail,news,uucp,operator,games,gopher,ftp,vcsa,nscd,rpm,haldaemon,netdump,sshd,rpc,rpcuser,nfsnobody,mailnull,gdm

Question # 2:

As per the existing servers configuration of Hp Linux Operating systems Default Accounts,

We observed that the Following Default Accounts On HP Linux are active and not disabled:

 1.      uucp, bin, nobody, daemon, lp

I will appreciate your advice to solve this issue, also the effects of disabling these accounts / services and what are the generally best practices to achive this.