groups

This is a wiki page. Be bold and improve it!

If you have any questions about the content on this page, don't hesitate to open a new ticket and we'll do our best to assist you.

Documentation

On Ubuntu, see:
/usr/share/doc/base-passwd/users-and-groups.html

Group management

List groups:

cat /etc/group

Add a group:

$ man groupadd
$ sudo groupadd mygroup

Add a user to a group (assuming your are john):

$ man gpasswd
$ id john             # Show your current groups.
$ sudo gpasswd -a john mygroup
$ su - john           # login again
$ id john             # See changes.

Note: changes take effect at the next login.

Files

Note: do not edit those files manually. Use the group administration tools listed below, instead.

/etc/group documented in man group.
/etc/group- is a back-up of the above, used by the tools modifying /etc/group.

Tools

id: print real and effective user and group IDs. Check options -g -G and -n.
chgr: change group ownership.
groups: print the groups a user is in.

See also:
login(1), newgrp(1), getgrent(3), getgrnam(3), passwd(5)

Guidelines

Ideally, distros and applications should provide the following:

Group description

A clear description of what each group is for, in order to assist system administrators (who may be newbie linux home users!) in choosing which group to assign to which user.

Together with the group description, a list of executables that require membership to the given group should be kept.

The group description should be stored in a machine readable format (a plain text file that can be used by applications).

Meta groups

Make a clear distinction between:

  1. System groups: groups created for the system itself (e.g. www-data) and that a user does not need to (or shouldn't) be part of.
  2. Administrator groups: groups created for a system administrator (the machine owner) and that other regular users do not need to be part of.
  3. System-created user groups: groups created by the system (principally upon installation) for the ease of running a system) with the intention of adding regular users into them.
  4. User-created user groups: groups created by the user for the purpose of differentiating groups of users (e.g. 'family', 'friends', 'marketing', etc.).

The meta groups should be stored in a machine readable format (a plain text file that can be used by applications).

Applications

GUI applications should use the above information in order to guide system administrators.

External resources

Issues related to this page:

ProjectSummaryStatusPriorityCategoryLast updatedAssigned to
Linux softwareWhat are the groups in /etc/group for?activenormalfeature request3 years 4 weeks