Hi,
On 2019/06/21 07:59, Andrew Savchenko wrote:
On Thu, 20 Jun 2019 16:32:56 +0200 Michał Górny wrote:
On Thu, 2019-06-20 at 09:53 -0400, Brian Evans wrote:
On 6/9/2019 7:39 AM, Michał Górny wrote:
+Tracking of user/group usage is done through dependencies. As long
+as any installed package depends on a specific user/group package,
+the respective user/group is assumed to be used. If no package
+requiring the specific user/group is left, the package manager
+automatically prunes the package clearly indicating it is no longer
+used.
You cannot know when a name is "no longer used". An administrator could
have adopted a username for other purposes.
That's why we don't remove the actual user/group. However, this is
a valuable information to the administrator that no package is using
the user/group in question.
So how do you propose to clean them up? Or let user systems trash
with unused uids/gids? The GLEP 81 only mensions some possible
tooling for cleanup. Is there an implementation available? I don't
see it within proposed patch sets.
This GLEP should not be accepted unless all necessary tools are
available including a cleanup tool.
find / -{user,group} ???
For files having ownership at least.
There may well be other reasons why the user is still in use (that I
can't think of right now), but unfortunately this is what makes this so
difficult. I'd propose that some tool be used that provides hooks to
allow additional checks to be added.
Kind Regards,
Jaco