Anonymous user by default?

6 posts / 0 new
Topic locked
Last post
#1 Wed, 02/23/2011 - 14:22
andresc889

Anonymous user by default?

Hi all,

I am using Virtualmin 3.83gpl. I went to Webmin > Webmin > Webmin Users, and I noticed that there is an "anonymous" user. I assume it's included there by default, because I didn't create it and when I created my virtual servers, I told Virtualmin not to create a Webmin user (nobody else is going to have access to that server). I am using the root user to access Virtualmin.

Does anybody know if there is any particular reason why this anonymous user exists? Does it represent a potential security risk?

Regards, Andres

Mon, 07/23/2012 - 04:47
fuggi

I am also very interested to learn about the potential security risk. Particularly as the "Root directory for file chooser" is set as "/" and the "Browse files as Unix user" option is set as "root" by default. Sounds quite risky from my point of view at first glance.

Best regards, fuggi

Mon, 07/23/2012 - 09:57
andreychek

Howdy,

On a new Virtualmin installation, there is indeed an "anonymous" user that's created by default.

However, just like the various system users in /etc/passwd that are in there by default -- the anonymous user isn't allowed to login. It also doesn't have access to any Webmin modules.

So there's no security issue there, and that's all normal.

-Eric

Tue, 07/24/2012 - 05:09
fuggi

Hi Eric, thank you for your answer which sounds good, except for the fact that the anonymous user on my system is allowed to access the "Virtualmin Mailman Mailing Lists". But as the user is not allowed to login (where can I check this?), I guess this is no problem anyway. Right?

Best regards, fuggi

Tue, 07/24/2012 - 09:11
andreychek

I overlooked that one, Virtualmin Mailman Lists is checked on my system too.

However, as you mentioned, it doesn't really matter since the user isn't allowed to log in.

-Eric

Mon, 11/13/2017 - 06:38
1baud

Good morning, so if I find a way, is it safe to delete this account?

1BAUD

Topic locked