• Bug#1104169: wish: adduser _radvd on new installs

    From Geert Stappers@21:1/5 to All on Sat Apr 26 17:40:02 2025
    Package: radvd
    Version: 1:2.20-1
    Severity: wishlist

    Hi,

    Wish: Do `adduser _radvd` on new installs.

    Actual: Make it possible to increase Standards-Version.


    Version 4.5.0
    =============

    Released January, 2020.

    9.2.1
    When maintainers choose a new hardcoded or dynamically generated
    username for packages to use, they should start this username with
    an underscore.




    Groeten
    Geert Stappers
    --
    Silence is hard to parse

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris Hofstaedtler@21:1/5 to Geert Stappers on Sat Apr 26 19:30:01 2025
    On Sat, Apr 26, 2025 at 05:26:33PM +0200, Geert Stappers wrote:
    Package: radvd
    Version: 1:2.20-1
    Severity: wishlist

    Hi,

    Wish: Do `adduser _radvd` on new installs.

    Actual: Make it possible to increase Standards-Version.


    Version 4.5.0
    =============

    Released January, 2020.

    9.2.1
    When maintainers choose a new hardcoded or dynamically generated
    username for packages to use, they should start this username with
    an underscore.

    radvd picked a username in the past, it is not picking a new
    username.

    There is no requirement to change the username, and it's probably a
    bad idea.

    Chris

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Geert Stappers@21:1/5 to Chris Hofstaedtler on Sat Apr 26 22:40:01 2025
    XPost: linux.debian.devel

    On Sat, Apr 26, 2025 at 07:20:38PM +0200, Chris Hofstaedtler wrote:
    On Sat, Apr 26, 2025 at 05:26:33PM +0200, Geert Stappers wrote:
    Package: radvd

    Wish: Do `adduser _radvd` on new installs.
    Actual: Make it possible to increase Standards-Version.


    Standards-Version 4.5.0
    Released January, 2020.

    9.2.1
    When maintainers choose a new hardcoded or dynamically generated
    username for packages to use, they should start this username with
    an underscore.

    radvd picked a username in the past,
    it is not picking a new username.

    The plan is to pick a new username ....

    --- a/debian/radvd.postinst
    +++ b/debian/radvd.postinst
    @@ -3,8 +3,8 @@
    set -e

    if [ "" = configure ]; then
    - if ! getent passwd radvd >/dev/null; then
    - adduser --quiet --system --no-create-home --home /run/radvd radvd
    + if ! getent passwd _radvd >/dev/null; then
    + adduser --quiet --system --no-create-home --home /run/radvd _radvd
    fi
    for i in /run/radvd; do
    if dpkg-statoverride --list >/dev/null; then
    --- a/debian/radvd.init
    +++ b/debian/radvd.init
    @@ -16,7 +16,7 @@ DESC=radvd
    CONFIG=/etc/radvd.conf
    PIDDIR=/var/run/radvd
    PIDFILE=/radvd.pid
    -OPTIONS="-u radvd -p "
    +OPTIONS="-u _radvd -p "
    PROC_SYS_IP6_FORWARDING=/proc/sys/net/ipv6/conf/all/forwarding

    . /lib/lsb/init-functions


    There is no requirement to change the username

    acknowledge

    Advantage I see is that systems getting a system user
    that can by the leading underscore easily identified as system user.

    and it's probably a bad idea.

    One disadvantage I see is upgraded systems getting
  • From Bastian Blank@21:1/5 to Geert Stappers on Sat Apr 26 22:50:01 2025
    XPost: linux.debian.devel

    On Sat, Apr 26, 2025 at 10:18:46PM +0200, Geert Stappers wrote:
    The plan is to pick a new username ....

    While you are at it, please switch to sysusers (see dh_installsysusers).

    --- a/debian/radvd.init
    +++ b/debian/radvd.init
    @@ -16,7 +16,7 @@ DESC=radvd
    CONFIG=/etc/radvd.conf
    PIDDIR=/var/run/radvd
    PIDFILE=/radvd.pid
    -OPTIONS="-u radvd -p "
    +OPTIONS="-u _radvd -p "
    PROC_SYS_IP6_FORWARDING=/proc/sys/net/ipv6/conf/all/forwarding

    Where is the corresponding change in the systemd unit? Do you need to
    store persistent data accessible by others, or could you just switch to
    dynamic user allocation? (DynamicUser=true)

    Bastian

    --
    If I can have honesty, it's easier to overlook mistakes.
    -- Kirk, "Space Seed", stardate 3141.9

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Geert Stappers@21:1/5 to Bastian Blank on Sun Apr 27 14:10:01 2025
    XPost: linux.debian.devel

    On Sat, Apr 26, 2025 at 10:29:07PM +0200, Bastian Blank wrote:
    On Sat, Apr 26, 2025 at 10:18:46PM +0200, Geert Stappers wrote:
    --- a/debian/radvd.init
    +++ b/debian/radvd.init

    Where is the corresponding change in the systemd unit?

    Work in progress, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104229


    Groeten
    Geert Stappers
    --
    Silence is hard to parse

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Geert Stappers@21:1/5 to All on Sun Apr 27 23:00:01 2025
    user debian-release@lists.debian.org
    usertag 1104169 + bsp-2025-04-be-leuven
    usertag 1104229 + bsp-2025-04-be-leuven
    thank you


    Current changes are at Salsa in the branch BSP_2025_04_be_Leuven https://salsa.debian.org/debian/radvd/-/tree/BSP_2025_04_be_Leuven

    They wait on further TLC


    Groeten
    Geert Stappers
    --
    Silence is hard to parse

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)