• Debian policy 9.2.1 needs --allow-bad-names

    From Joachim Zobel@21:1/5 to All on Sat Oct 5 17:50:02 2024
    Hi.

    Debian policy 9.2.1 says: "When maintainers choose a new hardcoded or dynamically generated username for packages to use, they should start
    this username with an underscore." By now this requires an 

    adduser --allow-bad-names

    in the script creating the user. Since I followed this policy, I'll
    have to adapt my package vzlogger. Alternatively I could I rename the
    user and ignore 9.2.1, the package is only in testing. Or is this a bug
    in adduser?

    Sincerely,
    Joachim

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Metzler@21:1/5 to jz-2017@heute-morgen.de on Sat Oct 5 20:10:01 2024
    On 2024-10-05 Joachim Zobel <jz-2017@heute-morgen.de> wrote:
    Debian policy 9.2.1 says: "When maintainers choose a new hardcoded or dynamically generated username for packages to use, they should start
    this username with an underscore." By now this requires an 

    adduser --allow-bad-names

    in the script creating the user. Since I followed this policy, I'll
    have to adapt my package vzlogger. Alternatively I could I rename the
    user and ignore 9.2.1, the package is only in testing. Or is this a bug
    in adduser?

    Hello,

    we use the underscore to "minimize collisions with locally created user accounts". adduser requiring a special option to generate users named
    liked this *also* increases the likelyhood that a local admin will *not* generate a user with conflicting name.

    So I think you you should continue following policy's guidance.

    cu Andreas
    --
    `What a good friend you are to him, Dr. Maturin. His other friends are
    so grateful to you.'
    `I sew his ears on from time to time, sure'

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Joachim Zobel on Sat Oct 5 20:20:01 2024
    On Sat, Oct 05, 2024 at 05:21:10PM +0200, Joachim Zobel wrote:
    Debian policy 9.2.1 says: "When maintainers choose a new hardcoded or dynamically generated username for packages to use, they should start
    this username with an underscore." By now this requires an 

    adduser --allow-bad-names

    in the script creating the user. Since I followed this policy, I'll
    have to adapt my package vzlogger.

    Is this a problem?

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmcBgeotFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh kxsP/03I5G8GqbWDdBrTj4eE5pwPX8oMWWMgTUxiYJ2+cfBVeMof0KiaKjsQTfjL y0vRm54uSH/bPDtF6ygUhKF6zdugeF4f125IsaVGMB95e0RAJ74ZPoYvkKz/ywqb /HlMd9T1OZyxfqfY+524KyiyyyrFKicRLcMzYUzXFcgUpnwVg49AApkIdDXHNIeR XzyWIC/W6oBIsOmgvorULxwoIEhPtyr0bxim0cH2IF2DR0K7+DCamqHbNbwQ3McR DEy3OWBH3OZ2eM0cTBIDKnpLCIQEChmVirkGPcmupcrp+l9D4A4kz5lxAPW/FoLh BSBnHWYAFlXRLtZUl71//M3X7PHTcEFePoNXqW8nd4WN+dFS0Vy4nVhLe1omX8xB jhzKfdrzV151HelPlsdHA4vjzK5pKJxcpwjR0Y68d5UbNKd0oU2pV75P/GI/DQRC FWPK7ZioAjbqiQIZaovxUWjn+Oi19+Txuv3BYGSnFo5O4PV5/hyNWHNOACcOLRJN O1i2hjOPUB9tE29JkTQoB+MMNYYzOCvItPzBg65vpXlqbyVF6xq9KLgTTsApmSjh fpgTwKAxmb/9+sG44yTJmoqGzHEUlC4x656eCOiTcEQGqNVMuw7AxKIW8r/zizkR JchFBr16h9hXQwLjb6eJDzoYZecNSZUMdtG/dzO5ii4qolfF
    =LbG0
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Vincent Blut@21:1/5 to Joachim Zobel on Sat Oct 5 20:36:35 2024
    Copy: debian-devel@lists.debian.org

    Hi Joachim,

    Le 2024-10-05 17:21, Joachim Zobel a écrit :
    Hi.

    Debian policy 9.2.1 says: "When maintainers choose a new hardcoded or dynamically generated username for packages to use, they should start
    this username with an underscore." By now this requires an 

    adduser --allow-bad-names

    in the script creating the user. Since I followed this policy, I'll
    have to adapt my package vzlogger. Alternatively I could I rename the
    user and ignore 9.2.1, the package is only in testing. Or is this a bug
    in adduser?

    If you are creating a system user, you do not need to pass the --allow-bad-names to adduser. However, this option is required if you intend to create a non-system user/group name starting with an underscore.

    Sincerely,
    Joachim

    Cheers,
    Vincent

    -----BEGIN PGP SIGNATURE-----

    iHUEABYKAB0WIQSRJQjHKbAUfuoc+DAQn1qAt/bgAQUCZwGHMwAKCRAQn1qAt/bg AaJlAQCceuQFCPZD1cHerLThhWIDE/IBcQG+1+YpX7t5vd2CCAEA9Awdv2JBe2cA eHWafJ4mytP7WHSDrHxthaLqjNSbNg0=
    =ILrG
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joachim Zobel@21:1/5 to All on Sun Oct 6 10:00:01 2024
    Hi.

    This turned out to be a non-issue. vzlogger creates a system user. So
    this only affects the projects backport to buster.

    Thanks for the answers, they helped me understanding this.

    Joachim

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)