Bug#228692: User/group creation/removal in package maintainer scripts

2018-08-06 Thread Sean Whitton
Hello, On Tue 31 Jul 2018 at 05:53PM +0200, Andreas Henriksson wrote: > This is my attempt to unlock the progress on this issue. > [...] Thank you. Together with the other recent messages to this bug, we have a fairly concrete proposal about what needs to change in Policy with regard to this bu

Bug#228692: User/group creation/removal in package maintainer scripts

2018-08-03 Thread Marc Haber
On Fri, Aug 03, 2018 at 09:44:35AM -0700, Russ Allbery wrote: > It might unspoil your day a bit to know that dh-sysuser is a standalone > package, not part of debhelper, so there's no evidence that the debhelper > maintainers have changed their mind on this without getting in touch with > you. It

Bug#228692: User/group creation/removal in package maintainer scripts

2018-08-03 Thread Russ Allbery
Marc Haber writes: > On Tue, Jul 31, 2018 at 07:37:46PM +0100, Simon McVittie wrote: >> dh-sysuser encapsulates maintainer script code into a single command, >> although imperative rather than declarative. It uses useradd directly, >> so it might be NIHing adduser(8). > Augh! > Seeing this sadd

Bug#228692: User/group creation/removal in package maintainer scripts

2018-08-03 Thread Marc Haber
On Tue, Jul 31, 2018 at 07:37:46PM +0100, Simon McVittie wrote: > dh-sysuser encapsulates maintainer script code into a single command, > although imperative rather than declarative. It uses useradd directly, > so it might be NIHing adduser(8). Augh! Seeing this saddens me deply. The history is

Bug#228692: User/group creation/removal in package maintainer scripts

2018-08-03 Thread Marc Haber
On Tue, Jul 31, 2018 at 08:00:40PM -0700, Russ Allbery wrote: > As Guillem mentioned, I as a Debian user and system administrator would > dearly like to be able to configure Debian to delete created users when > the package is purged. I understand the reasons why we don't think this > is safe to d

Bug#228692: User/group creation/removal in package maintainer scripts

2018-07-31 Thread Russ Allbery
Andreas Henriksson writes: > ## common conventions > users/groups should have an "invalid" prefix to avoid clashes with local > users > - sometimes inconvenient to change username and lots of packages doesn't > do this so should only be recommended when possible, not mandatory. > - Debian- (co

Bug#228692: User/group creation/removal in package maintainer scripts

2018-07-31 Thread Guillem Jover
Hi! On Tue, 2018-07-31 at 17:53:50 +0200, Andreas Henriksson wrote: > I'm going to attempt to first collect what I've picked up both from the > previously mentioned mailinglist thread (and other similar ones) and > what I've seen when reviewing maintainerscripts of packages in the > archive. Hopef

Bug#228692: User/group creation/removal in package maintainer scripts

2018-07-31 Thread Simon McVittie
On Tue, 31 Jul 2018 at 17:53:50 +0200, Andreas Henriksson wrote: > previously created users should *not* (ever) be removed There has been a suggestion in the past that these users should be locked on package removal and unlocked on reinstallation, as implemented in (for example) openarena-server.

Bug#228692: User/group creation/removal in package maintainer scripts

2018-07-31 Thread Andreas Henriksson
Hi, This is my attempt to unlock the progress on this issue. I'm going to attempt to first collect what I've picked up both from the previously mentioned mailinglist thread (and other similar ones) and what I've seen when reviewing maintainerscripts of packages in the archive. Hopefully others ca