Package: stunnel4
Version: 2:4.070-2
Severity: wishlist

Hello,

This part in postinst script deletes stunnel4 user if it exists:
###
# 2. Ensure that no standard account or group will remain before adding the
#    new user
if [ "$IUID" != "NONE" ]; then # remove existing user
  $USERDEL $USER
fi

if $GROUPMOD $USER > /dev/null 2>&1; then
  $GROUPDEL $USER;
fi

What is the rationale behind this? Why not only add the user if it
doesn't exist and leave it be if it exists? Deleting and readding the
stunnel user causes /etc/passwd etc. files to change on each upgrade.
This unnecessarily triggers alert on monitored files under /etc if using
tool such as tripwire. Just one counter argument against this behaviour.

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.9
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages stunnel4 depends on:
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  libwrap0                    7.6.dbs-6    Wietse Venema's TCP wrappers libra
ii  netbase                     4.19         Basic TCP/IP networking system
ii  openssl                     0.9.7e-3     Secure Socket Layer (SSL) binary a

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to