Re: How to set a new user?

["Stefan Mühlinghaus" <"master..."@googlemail.com>]

[-- Attachment #1.1: Type: text/plain, Size: 1950 bytes --]

The groups on your system will probably vary somewhat from that list since 
you will have diffent software installed and without the software that uses 
the groups having them is quite pointless. That means you should not just 
create groups on your system that are not already there.

Serveral groups just allow access to some hardware on your system. These 
are for example *floppy, dialout, audio, video, cdrom, scanner, network*. 
You need to add your user to these groups if that kind of hardware exists 
and your user needs access to it.
*audio*, *video*, *cdrom* and *scanner* are probably good ideas.
Networking is usually established by root during boot so your user probably 
will not need to be in *network* or *dialout*.
You need to be in the *kvm* group if you want to use KVM-based virtual 
machines.

*wireshark*, *clamav*, *socklog* and *pulse-access* are really only 
relevant if you are using the corresponding software and then it depends on 
the software what it actually means to be in the group. Wireshark is a 
network protocol analyzer, ClamAV is a virus scanner and Socklog a system 
message logger. If you do not have/use these programs you do not need to be 
in their groups. You you are using PulseAudio for audio on your system it 
may be a good idea for your user to be in the *pulse-access* group to gain 
access to the PulseAudio server.

If you create a new user it usually gets its own group with the same name 
as the user itself. What the members of this group can or cannot do is 
completely up to you. You may also add your user to the *users* group but 
unless you explicitly give this group any special meaning it does not give 
you any advantages.

The *wheel* group is used by *su* and *sudo* to determine who may gain root 
access via these commands. If you want that your user should be in *wheel*. 
You however also need to configure that behaviour in /etc/sudoers.

I hope this clarifies a few things :)

[-- Attachment #1.2: Type: text/html, Size: 2189 bytes --]