Re: System users: removing them

2011-05-29 Thread Jonathan Nieder
Roger Leigh wrote: > We could add special behaviour to adduser to unlock the account > if it already exists when run in the postinst. However, most > postinsts wrap the call to adduser with a check for whether the > account already exists, so it would not be called without an > update to every pr

Re: System users: removing them

2011-05-29 Thread Jonathan Nieder
(culled cc list of a few people I know read -devel) Roger Leigh wrote: > Given the need to consider unlocking as well as locking, I'm not sure > it's worth adding special support to deluser: the typical logic used > to create the user will be insufficient to unlock, so it's no less > the effort to

Re: System users: removing them

2011-04-25 Thread Marc Haber
On Thu, 31 Mar 2011 09:23:33 +0100, Lars Wirzenius wrote: >Would a debhelper tool to create/remove system users be useful? I >suspect there's only relatively few packages that do that, so perhaps >not. I had that discussion years ago with Joey and his comments were the cause that I submitted patc

Re: System users: removing them

2011-04-12 Thread Lars Wirzenius
(Cc to the relevant bug added.) On ma, 2011-04-11 at 14:05 +0100, Ian Jackson wrote: > Lars Wirzenius writes ("Re: System users: removing them"): > > Thus, I propose to change 9.2.2 "UID and GID classes", the paragraph on > > uids in the range 100-999, to add t

Re: System users: removing them

2011-04-11 Thread Ian Jackson
Lars Wirzenius writes ("Re: System users: removing them"): > Thus, I propose to change 9.2.2 "UID and GID classes", the paragraph on > uids in the range 100-999, to add the following sentence to the end of > the paragraph: > > Packages must not remov

Re: System users: removing them

2011-04-09 Thread Lars Wirzenius
Adding a copy to the bug report. Everyone please Cc 621...@bugs.debian.org if replying to this subhtread. Thanks. On la, 2011-04-09 at 10:14 +0100, Roger Leigh wrote: > On Sat, Apr 09, 2011 at 09:44:28AM +0100, Lars Wirzenius wrote: > > Package: debian-policy > > Version: 3.9.2.0 > > > > thanks

Re: System users: removing them

2011-04-09 Thread Roger Leigh
On Sat, Apr 09, 2011 at 09:44:28AM +0100, Lars Wirzenius wrote: > Package: debian-policy > Version: 3.9.2.0 > > thanks > > Background for the policy list: see thread starting at > http://lists.debian.org/debian-devel/2011/03/msg01174.html > and continuing in April at > http://lists.debian.org/deb

Re: System users: removing them

2011-04-09 Thread Lars Wirzenius
Package: debian-policy Version: 3.9.2.0 thanks Background for the policy list: see thread starting at http://lists.debian.org/debian-devel/2011/03/msg01174.html and continuing in April at http://lists.debian.org/debian-devel/2011/04/msg00210.html On ma, 2011-04-04 at 21:09 +0100, Lars Wirzenius

Re: System users: removing them

2011-04-04 Thread Russ Allbery
Tollef Fog Heen writes: > - Most or all system accounts are locked and unable to be used for > login. Perhaps policy should say that user accounts belonging to a > package must be locked when the package is removed? Speaking of that, fixing Bug#274229 and the merged bugs for wheezy would su

Re: System users: removing them

2011-04-04 Thread Tollef Fog Heen
]] Lars Wirzenius Hi, | I think this would be a good point to have a discussion and set policy | on how to deal with this. The policy manual seems to currently be silent | about removing users created by the package at installation time. | | * We can decide that packages may not remove th

Re: System users: removing them

2011-04-04 Thread Lars Wirzenius
On to, 2011-03-31 at 14:18 +0100, Ian Jackson wrote: > Lars Wirzenius writes ("System users: removing them"): > > The easy solution for this would be to never remove the user, but that's > > also not so clear. > > To remove a user and reclaim the uid is a difficult business. This is true in the g

Re: System users: removing them

2011-03-31 Thread Scott Kitterman
On Thursday, March 31, 2011 04:23:33 AM Lars Wirzenius wrote: > We have some packages that require a dedicated user to be created, and > calling "adduser --system" in postinst does that. However, it is not > always clear whether such users should be removed when the package is > removed. > >

Re: System users: removing them

2011-03-31 Thread Ian Jackson
Lars Wirzenius writes ("System users: removing them"): > The easy solution for this would be to never remove the user, but that's > also not so clear. To remove a user and reclaim the uid is a difficult business. > * Extra accounts are just wasteful, and may cause some confusion. > *