On Tue, 2022-08-23 at 16:23 +0000, Holger Levsen wrote: > users must not be cleaned up (=removed) on package removal
Well perhaps not a must as per policy, but I think for debian-security- support it would still make sense to clean up the user, or do you expect anyone to create files under that user which would then have no valid user/group? :-) Cheers, Chris.