Package: gkrellmd
Version: 2.3.1-8
Severity: minor

gkrellmd's postrm script calls
 deluser --remove-all-files gkrellmd
which performs a recursive descent of the file tree, into all users
home directories and all mounted NFS volumes. This became apparent
because some (large and deep!) NFS volumes were exported with the
root_squash option, so provoked

Purging configuration files for gkrellmd ...
Looking for files to backup/remove ...
Can't opendir(/home/martin/cluster/arm/doc): Permission denied
 at /usr/sbin/deluser line 304
Can't opendir(/home/martin/cluster/doc/Scritti): Permission denied
 at /usr/sbin/deluser line 304
...

I guess this is unintentional, since I don't think gkrellmd owns any
files. It doesn't even own /etc/gkrellmd.conf (and rightly so).
However, it is very slow, quite alarming for users and could
conceivable silently delete files at random throughout the filesystem,
for example if the gkrellm UID happened to correspond to some other
system user on a mounted NFS volume.

I'm not sure why the gkrellm user needs a home directory /home/gkrellm
either... maybe this could be tweaked too.

Cheers. Great utility



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to