Hi Marc,
Quoting Bálint Réczey (2022-02-10 22:46:50)
> Sorry for the delay, I tried bumping the severity to buy myself some time.
>
> It seems this is an adduser bug and the following patch fixes it:
> --- adduser.orig 2018-09-15 21:12:39.000000000 +0200
> +++ adduser 2022-02-10 22:27:05.759922091 +0100
> @@ -434,7 +434,7 @@
> $shell = $special_shell || '/usr/sbin/nologin';
> $undouser = $new_name;
> my $useradd = &which('useradd');
> - &systemcall($useradd, '-d', $home_dir, '-g', $ingroup_name, '-s',
> + &systemcall($useradd, '-r', '-d', $home_dir, '-g', $ingroup_name, '-s',
> $shell, '-u', $new_uid, $new_name);
> if(!$disabled_login) {
> my $usermod = &which('usermod');
>
> Apparently useradd correctly guessed system user ranges in the past,
> but this is not something to rely on.the recent upload of shadow 1:4.11.1+dfsg1-1 made above patch necessary as otherwise useradd will create empty directories in /var/mail and /var/spool/mail for the system users _apt, systemd-network and systemd-resolve. This in turn breaks the testsuite of my package mmdebstrap. Are you available to upload another version of adduser in the next few days? Otherwise, I can also NMU it if you want because this is breaking one of my packages. Thanks! cheers, josch
signature.asc
Description: signature
