I keep seeing this message in the "daily insecurity output":
	Login toor is off but still has a valid shell (/bin/sh)

What is the account "toor" used for?  Do I need it?  Should I just delete
it (but then I ask, why is it in the distribution passwd file to begin with?),
or should I change /bin/sh to something fictitious, or should I issue a new
password for "toor?"  TIA.

henry nelson