« Return to Thread: Bug#621833: System user handling in packages: status of discussion
Bug#621833: System user handling in packages: status of discussion
by Roger Leigh-5
::
Rate this Message:
On Fri, Jun 10, 2011 at 10:12:20AM +0100, Lars Wirzenius wrote:
> I've just reviewed the discussion so far, here's my best attempt
> at a summary of the current status:
>
> * To create an user, a maintainer script should call
> "adduser --system foo". It is not necessary to wrap this in
> a check for whether the user exists.
> * When the package is removed, the user should be locked:
> "lockuser foo".
> * lockuser is a still-hypothetical tool, which needs to be added
> to the adduser package. It is a wrapper around "usermod -L -e 1 foo".
> * Similarly, adduser needs to be changed to unlock:
> "usermod -U -e '' foo".Would "lockuser" need to be in the adduser package? Given that
adduser is only priority:important, it's not guaranteed to be present
when postrm is run, so the operation could fail. Maybe passwd is a
better place for it, given that it contains useradd etc., and is
priority:required.
Regards,
Roger
--
.''`. Roger Leigh
: :' : Debian GNU/Linux http://people.debian.org/~rleigh/
`. `' Printing on GNU/Linux? http://gutenprint.sourceforge.net/
`- GPG Public Key: 0x25BFB848 Please GPG sign your mail.
> I've just reviewed the discussion so far, here's my best attempt
> at a summary of the current status:
>
> * To create an user, a maintainer script should call
> "adduser --system foo". It is not necessary to wrap this in
> a check for whether the user exists.
> * When the package is removed, the user should be locked:
> "lockuser foo".
> * lockuser is a still-hypothetical tool, which needs to be added
> to the adduser package. It is a wrapper around "usermod -L -e 1 foo".
> * Similarly, adduser needs to be changed to unlock:
> "usermod -U -e '' foo".
adduser is only priority:important, it's not guaranteed to be present
when postrm is run, so the operation could fail. Maybe passwd is a
better place for it, given that it contains useradd etc., and is
priority:required.
Regards,
Roger
--
.''`. Roger Leigh
: :' : Debian GNU/Linux http://people.debian.org/~rleigh/
`. `' Printing on GNU/Linux? http://gutenprint.sourceforge.net/
`- GPG Public Key: 0x25BFB848 Please GPG sign your mail.
signature.asc (205 bytes) « Return to Thread: Bug#621833: System user handling in packages: status of discussion
| Free embeddable forum powered by Nabble | Forum Help |
