Void-packages: We should use constant uids and gids for system accounts.

Created on 23 Jun 2018  路  3Comments  路  Source: void-linux/void-packages

The system_accounts variable in xbps templates does let you do this, but
nobody ever seems to use it. Really, we should. As things stand now,
uids and gids for system users are a bit random. This is both fragile
and possibly insecure, especially in the event of package uninstalls
or reinstalls.

Most helpful comment

https://wiki.debian.org/AccountHandlingInMaintainerScripts#Account_deletion

My vote goes to not automatically deleting users and maybe changing the shell and some comment to indicated that they were removed.

Preallocated ids would be nice, but that would be hard to switch to.

All 3 comments

https://wiki.debian.org/AccountHandlingInMaintainerScripts#Account_deletion

My vote goes to not automatically deleting users and maybe changing the shell and some comment to indicated that they were removed.

Preallocated ids would be nice, but that would be hard to switch to.

Agreed with Duncaen. If we would just not remove accounts, so the old system account just sticks around, that would be satisfactory to me.

Agreed, not removing accounts seems like the way to go.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

pullmoll picture pullmoll  路  4Comments

no2spam picture no2spam  路  4Comments

Vaelatern picture Vaelatern  路  4Comments

Vaelatern picture Vaelatern  路  6Comments

surafel911 picture surafel911  路  3Comments