# shill spawns dhcpcd as 'dhcp' user | |
20104:224 | |
# shill spawns openvpn as 'openvpn' user | |
20104:217 | |
# charon daemon (part of strongswan IPSec package) drops to 'ipsec' user | |
20104:212 | |
# shill spawns logger as 'syslog' user | |
20104:202 | |
# shill spawns tc as 'nobody' user | |
20104:65534 | |
# We can't allow any of the target UIDs to switch to other UIDs, or | |
# else a compromised shill could switch to one of them and then switch | |
# to any UID on the system. | |
217:217 | |
212:212 | |
224:224 | |
202:202 | |
65534:65534 |