Re: [opensuse-packaging] no more nobody user on OBS?
On Wed, 2017-05-24 at 09:25 +0200, Ruediger Meier wrote:
However it's just annoying that we have to do that and endusers of the distro also have to do that. Probably a user would just use useradd to create the missing user manually with random id and group, conflicting to the definitions of system-user-nobody's /usr/lib/sysusers.d/system-user-nobody.conf
an end-user trusting your package gets the user as a dependency.. why would he have to create the user? You as packager should know what your package requires - what user it relies on and what not.
On Wednesday 24 May 2017, Dominique Leuenberger / DimStar wrote:
On Wed, 2017-05-24 at 09:25 +0200, Ruediger Meier wrote:
However it's just annoying that we have to do that and endusers of the distro also have to do that. Probably a user would just use useradd to create the missing user manually with random id and group, conflicting to the definitions of system-user-nobody's /usr/lib/sysusers.d/system-user-nobody.conf
an end-user trusting your package gets the user as a dependency.. why would he have to create the user?
You as packager should know what your package requires - what user it relies on and what not.
I don't understand why you always think about users only using distro packages. This is about developers or interested people who want to build and check software like util-linux or coreutils. It works on any other Linux distro but not anymore on openSUSE. This is just *one* example. I can understand why we should remove useless users from the base system but daemon and nobody are exceptions IMO. The other aspect is that users will create missing users manually and most likely with conflicting specs. So if they later install a package which requires such user then it may not work. cu, Rudi -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org
On Wednesday, 24 May 2017 9:39 Dominique Leuenberger / DimStar wrote:
an end-user trusting your package gets the user as a dependency.. why would he have to create the user?
You as packager should know what your package requires - what user it relies on and what not.
As others already explained, this logic only works if you assume users only run software from distribution packages (and only those which are kept in sync with all latest quirks). I'm afraid this is not true in general. Sure, you can say it's user's responsibility to make sure they have everything their third party software of scripts need to work. But they would have to know they need it - and in this particular case, one can hardly expect authors of third party software to explicitely mention they need user named "nobody" just because there is one distribution (and let's face it, not really one of the most prominent ones) decided not to create it. So the question is: do we want to send our users a message that we do not care about their needs at all once they use anything they didn't get from the distribution - and not even in the case it would cost us almost nothing? Michal Kubeček -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org
participants (3)
-
Dominique Leuenberger / DimStar -
Michal Kubecek -
Ruediger Meier