Operating System - Linux
1753316 Members
5007 Online
108792 Solutions
New Discussion

Can I define 65535 as nobody in REDHAT 6/7?

 
Hanry Zhou
Super Advisor

Can I define 65535 as nobody in REDHAT 6/7?

In REDHAT 6, nobody is defined as uid=99, and nfsnobody as uid=65534. Not sure of what it's uid is in redhat 7.

in NetApp NFS server, we are planning on and prefer squashing root to 65535. If so, then how do I match this plan to Redhat server?

 

PLease advise.

none
2 REPLIES 2
avd437
HPE Pro

Re: Can I define 65535 as nobody in REDHAT 6/7?

 

I work for HPE.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo
avd437
HPE Pro

Re: Can I define 65535 as nobody in REDHAT 6/7?

when some user id (uid) or group id (gid) cannot be represented in a Linux namespace, the kernel uses the 65534:65534 uid/gid pair as the uid/gid of a process or file. 

Defining the nobody user with the uid/pair of 65534 is not an industry standard, but it is a current good practice: multiple Linux distributions, and BSD systems follow this convention

  • on a RHEL 8 system, verify that the nobody user has the uid/gid 65534
    grep nobody /etc/passwd
    nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
  • on a RHEL 7 system, the nobody user has the uid/gid 99
    grep nobody /etc/passwd
    nobody:x:99:99:Nobody:/:/sbin/nologin

I work for HPE.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
Accept or Kudo