Your message dated Sun, 4 Aug 2024 11:32:42 +0200
with message-id <0f3c1af6-78ee-42fb-996b-d16b88aca...@sfritsch.de>
and subject line Re: Bug#574565: should remove ssl-cert group at purge if 
unused, and maybe add user to group
has caused the Debian Bug report #574565,
regarding should remove ssl-cert group at purge if unused
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
574565: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574565
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ssl-cert
Version: 1.0.25
Severity: serious

ssl-cert adds a group at install which is not removed again at purge.

See the package icecast2 for a proven purge routine for inspiration.

Also, since ssl-cert creates only a group, and order of install or purge
is nondeterministic, other packages cannot reliably cleanup the group if
they are purged last.

A way to solve that is for the ssl-cert package to create a dummy user
and add that to its group: Then both ssl-cert itself and packages using
it can reliably remove the group at purgte time if the group is empty.

Again, see icecast2 for example.


Kind regards,

 - Jonas


P.S.

Problem discovered during resolving of bug#574214.



--- End Message ---
--- Begin Message ---
Am 19.03.10 um 03:05 schrieb Jonas Smedegaard:
ssl-cert adds a group at install which is not removed again at purge.

I think the ssl-cert group is something that the local user may use for certificate files or keys. So, in order to determine if the group is unused, one would need to search all file systems for files with that gid. This would take an excessive amount of time during purge. I think it is better to leave the group untouched.

Closing the bug.

--- End Message ---

Reply via email to