Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1234290

Bug#1008082: implement deluser --system --lock functionality

Show all headers | View raw

On Thu, Feb 20, 2025 at 02:24:43PM -0500, Matt Barry wrote:
> > We don't need to worry about state, since for a system account, after
> > adduser --system, we have the shell set to /usr/bin/nologin and the
> > expity date at 99999. Any package maintainer wanting it differently
> > would explicitly spell that out in her postinst, reinstating the account
> > to their specification without having us to worry
> 
> 
> Thanks for clarifying, that's good to know.  Another thought I had: do we
> want adduser --unlock --system to fall back to creating the account anyway,
> if it doesn't exist (at least by default).. the resulting behavior being
> that installing a package that shares a common system user that was
> previously disabled will enable it on installation - I'm not sure which is
> less surprising, will defer to you if you think usermod -Ue99999 is
> sufficient.

adduser --unlock => just unlock, for system and non system accounts.
Error if does not exist

adduser --system => make sure that account exists and is unlocked. If
account exists as a normal user => bomb out. If account exists as a
system user => keep current behavior, but unlock if locked.

Frankly, I don't know how we currently behave if adduser --system
specifies a different shell, different group memberships, different home
directory. We should keep our current behavior (principle of least
surprise).

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1008082: implement deluser --system --lock functionality Matt Barry <matt.barry23@gmail.com> - 2025-02-20 16:10 +0100
  Bug#1008082: implement deluser --system --lock functionality Marc Haber <mh+debian-packages@zugschlus.de> - 2025-02-20 18:40 +0100
    Bug#1008082: implement deluser --system --lock functionality Matt Barry <matt.barry23@gmail.com> - 2025-02-20 20:30 +0100
      Bug#1008082: implement deluser --system --lock functionality Marc Haber <mh+debian-packages@zugschlus.de> - 2025-02-20 21:50 +0100
        Bug#1008082: implement deluser --system --lock functionality Matt Barry <matt.barry23@gmail.com> - 2025-02-21 17:30 +0100
          Bug#1008082: implement deluser --system --lock functionality Marc Haber <mh+debian-packages@zugschlus.de> - 2025-02-22 11:20 +0100

csiph-web