On Sat, Sep 02, 2006 at 09:20:25PM -0400, Joey Hess wrote: > Frédéric Brin wrote: > > I just installed dbus 0.92 from unstable. Running it, I got an error > > telling me the netdev groups does not exists. > > > > So I jumped to the debian's bug tracker, on bug number 352713. This bug > > is on the inclusion of the netdev and powerdev groups. My only concern > > about this bug is that it is closed, but base-passwd package has not > > updated to take care of the two groups netdev and powerdev. > > > > In fact my /usr/share/base-passwd/group.master from the base-passwd file > > does not contain either netdev or powerdev. > > > > Do we need to reopen the bug ? > > AFAIK, hal creates powerdev on installation, and we decided that > whatever package needs netdev should create it on installation. If dbus > needs it and doesn't create it then a bug should be filed on dbus.
My concern about netdev and powerdev (although I've been slow to voice it), and the main reason I was stalling on adding them to base-passwd, is that I don't see how we can sanely handle upgrades to a system requiring those groups. Say you have a working desktop system predating netdev and powerdev; now something has to somehow know to add certain users to those groups on upgrade, and presumably if it gets that wrong then it's a security vulnerability (otherwise why do we need those separate groups in the first place?). Does anyone have the slightest clue on how to go about this? The other reason I was stalling is that I want to convert base-passwd over to debconf at long last before making any more changes to the passwd/group master files, since there are now extant systems where users aren't expecting to be asked any questions at the terminal on upgrade. Cheers, -- Colin Watson [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

