On Mon, Jan 07, 2008 at 11:42:43PM +0000, Stephen Gran wrote:
>
> clamav-base. It does a fairly standard:
> if [ -z "$2" ]; then
> if [ -z "`getent passwd clamav`" ]; then
> adduser --system --no-create-home \
> --disabled-password --disabled-login \
> --shell /bin/false --group --home /var/lib/clamav clamav
> fi
> chown clamav:clamav $DATABASEDIR
> chown clamav:clamav $RUNDIR
> chown clamav:clamav $LOGDIR
>
> This can go wrong if you've removed the package but not purged it and
> then delgroup'ed the group (if you purge the package, it removes both
> user and group), or if even on a fresh install there is a user but no
> group present. Both of those are so strange I didn't (and don't)
> consider them hugely interesting cases to code around.
>
> I just don't know how you've gotten that error. The only thing I can
> think of is that you may have scripts for copying in accounts into the
> chroot that fails to also copy in the groups?
I can't be sure of this, but what I _might_ have done is copying /etc/passwd
and/or /etc/group from outside the chroot (to propagate UIDs/GIDs).
Perhaps I only copied /etc/passwd (which presumably would include 'clamav')
and not /etc/group ? That would explain it.
In that case, I'd suggest making it more robust. Something like:
if [ -z "`getent group clamav`" ]; then
addgroup clamav
fi
if [ -z "`getent passwd clamav`" ]; then
adduser --system --no-create-home \
--disabled-password --disabled-login \
--shell /bin/false --home /var/lib/clamav clamav \
--ingroup clamav
fi
--
Robert Millan
<GPLv2> I know my rights; I want my phone call!
<DRM> What use is a phone call, if you are unable to speak?
(as seen on /.)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]