On Sat, Sep 02, 2006 at 09:20:25PM -0400, Joey Hess wrote:
> Frédéric Brin wrote:
> > I just installed dbus 0.92 from unstable. Running it, I got an error
> > telling me the netdev groups does not exists.
> > 
> > So I jumped to the debian's bug tracker, on bug number 352713. This bug
> > is on the inclusion of the netdev and powerdev groups. My only concern
> > about this bug is that it is closed, but base-passwd package has not
> > updated to take care of the two groups netdev and powerdev.
> > 
> > In fact my /usr/share/base-passwd/group.master from the base-passwd file
> > does not contain either netdev or powerdev.
> > 
> > Do we need to reopen the bug ?
> 
> AFAIK, hal creates powerdev on installation, and we decided that
> whatever package needs netdev should create it on installation. If dbus
> needs it and doesn't create it then a bug should be filed on dbus.

My concern about netdev and powerdev (although I've been slow to voice
it), and the main reason I was stalling on adding them to base-passwd,
is that I don't see how we can sanely handle upgrades to a system
requiring those groups. Say you have a working desktop system predating
netdev and powerdev; now something has to somehow know to add certain
users to those groups on upgrade, and presumably if it gets that wrong
then it's a security vulnerability (otherwise why do we need those
separate groups in the first place?). Does anyone have the slightest
clue on how to go about this?

The other reason I was stalling is that I want to convert base-passwd
over to debconf at long last before making any more changes to the
passwd/group master files, since there are now extant systems where
users aren't expecting to be asked any questions at the terminal on
upgrade.

Cheers,

-- 
Colin Watson                                       [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to