[Bug 1162360] New: tss packages should use new style user and group creation
http://bugzilla.suse.com/show_bug.cgi?id=1162360 Bug ID: 1162360 Summary: tss packages should use new style user and group creation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening@forge.provo.novell.com Reporter: msuchanek@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- https://en.opensuse.org/openSUSE:Packaging_guidelines#Users_and_Groups -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 http://bugzilla.suse.com/show_bug.cgi?id=1162360#c1 --- Comment #1 from Michal Suchanek <msuchanek@suse.com> --- %pre -# the same user is employed by trousers (and was employed by the old -# resourcemgr shipped with the tpm2-0-tss package): -# -# trousers just needs those accounts for dropping privileges to. The service -# starts as root and uses set*id to drop to tss, after the tpm device has been -# opened. -# -# tpm2-abrmd has no set*id handling and thus requires /dev/tpm to be owned -# by the tss user. Therefore we also need to install a udev rule file. -# -# trousers was here first and created the user like this, also giving it a -# home in /var/lib/tpm. I don't think the home directory is used by any of -# both packages ATM. Trousers is keeping state there, but the directory is -# owned by root and files are opened before dropping privileges. The passwd -# entry seems not to be evaluated. -# -# so I guess we can share the account between the two packages for now. -%_bindir/getent group tss >/dev/null || %{_sbindir}/groupadd -g 98 tss -%_bindir/getent passwd tss >/dev/null || \ - %{_sbindir}/useradd -u 98 -o -g tss -s /bin/false -c "TSS daemon" \ - -d %{_localstatedir}/lib/tpm tss -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 http://bugzilla.suse.com/show_bug.cgi?id=1162360#c3 --- Comment #3 from Matthias Gerstner <matthias.gerstner@suse.com> --- Looks like a good idea, however I'd like to keep the comment block in place, since it adresses more than just user creation. Can you maybe add the comment to the system-user package instead? Or keep it in tpm2-0-tss and move it to the new "Requires(pre): User(tss)" line. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 http://bugzilla.suse.com/show_bug.cgi?id=1162360#c4 --- Comment #4 from Swamp Workflow Management <swamp@suse.de> --- This is an autogenerated message for OBS integration: This bug (1162360) was mentioned in https://build.opensuse.org/request/show/769067 Factory / trousers https://build.opensuse.org/request/show/769069 Factory / tpm2-0-tss -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 http://bugzilla.suse.com/show_bug.cgi?id=1162360#c5 --- Comment #5 from Swamp Workflow Management <swamp@suse.de> --- This is an autogenerated message for OBS integration: This bug (1162360) was mentioned in https://build.opensuse.org/request/show/775206 Factory / system-users -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 http://bugzilla.suse.com/show_bug.cgi?id=1162360#c6 --- Comment #6 from Swamp Workflow Management <swamp@suse.de> --- This is an autogenerated message for OBS integration: This bug (1162360) was mentioned in https://build.opensuse.org/request/show/777248 Factory / trousers -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 Frederic Crozat <fcrozat@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening@forge.pr |screening-team-bugs@suse.de |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 Alynx Zhou <alynx.zhou@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alynx.zhou@suse.com Assignee|screening-team-bugs@suse.de |matthias.gerstner@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1162360 http://bugzilla.suse.com/show_bug.cgi?id=1162360#c7 Matthias Gerstner <matthias.gerstner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #7 from Matthias Gerstner <matthias.gerstner@suse.com> --- This should be through by now. After some fallout with broken packages both tpm stacks should be in fine condition again. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com