severity 256615 serious
thanks

On Mon, Jun 28, 2004 at 08:27:55AM +0200, bott wrote:
> I just finished moving from zope to zope2.7 . I installed zope2.7
> with zope and I started moving the instances from the old one to the new
> one. When everything has been done I removed zope and it removed the
> group and the user zope, which are needed by zope2.7 .
> 
> I think it should check if zope2.7 is installed, and if so not to touch
> the user an the group.

Ew. Removing a system user and/or group automatically in a package
should never be done, for various reasons.

One of them is that you can never be sure there are no files left on any
volume, maybe even an unmounted one or something, that will on next
addition of a user suddenly be owned by a random other user, with all
kind of bad implications.

Not to mention what happens if the system administrator himself has
either added the zope user, or started using it for other zope-related
stuff too. I note that zope removes the zope user & group
unconditionally in purge, without any checks.

--Jeroen

-- 
Jeroen van Wolffelaar
[EMAIL PROTECTED]
http://jeroen.A-Eskwadraat.nl


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to