Mailinglist Archive: opensuse-security (555 mails)

[Michael Ströder <michael@xxxxxxxxxxxx>]

Roman Drahtmueller wrote:
> 
> > but UIDGID's may conflict so don't just copy stuff over. You'll prolly also
> > need to create /home/* directories. An easy way to do this would be tu run
> > /etc/passwd and group through something like awk that puts out data to
> > groupadd/useradd.
> 
> This basically one of the reasons why SuSE Linux has so many users
> installed by default. If you add these users dynamically when you need
> them, you run into trouble.

I concur. On mission-critical systems I'm always feeling *very*
unhappy that SuSE Linux comes with so many default users and groups.
Usually I delete them all but it takes some time to figure out which
home-directories you can delete. Annoying!

I see no reason that application-specific user entries cannot be
installed on-the-fly during package install. If an UID or a GID is
already in use the installation should simply fail with a meaningful
error message.

Ciao, Michael.