On Thu, 5 Jan 2006, Steven M. Bellovin wrote:

>> You probably added the Cyrus imapd client or cyrus-saslauth stuff.
>>
>> cyrus:*:1003:6:cyrus-sasl cyrus user:/nonexistent:/bin/sh

> Perhaps packages that add userids should indicate that in the gecos
> field:
>
> 	cyrus:*:1003:6:cyrus-sasl cyrus user,pkg-imapd:/nonexistent:/bin/sh
>
> or some such.  (tech-pkg added to the cc list.)

Preferably also with a notice in big fat red letters saying "This is not a 
guarantee your system has not been compromised, check that you really did 
install this package and that it should create users!" - but perhaps that 
is too much to ask for.


MAgnus