Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Wed, 9 Mar 2022 14:35:52 -0600, Richard Laager wrote: >If the admin can change the default DIR_MODE that applies to system user >home directories, then any postinst script doing `adduser --system` >needs to also explicitly chmod its home directory if it needs anything >more permissive than 7

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Thu, 10 Mar 2022 00:04:38 +0100, Ansgar wrote: >On Wed, 2022-03-09 at 17:29 -0500, Michael Stone wrote: >> Those are actually unrelated--the big reason for the more permissive >> umask is to allow people to seamlessly work with other people in a >> group, especially within setgid shared direct

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Seth Arnold
On Tue, Mar 08, 2022 at 05:49:04PM +0100, Marc Haber wrote: > (2) > #774046 #520037 > Which special characters should we allow for account names? Please consider the leading character separately from the rest of the characters: - leading digits sometimes causes programs to parse a 'username' as a

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Michael Stone
On Thu, Mar 10, 2022 at 12:04:38AM +0100, Ansgar wrote: On Wed, 2022-03-09 at 17:29 -0500, Michael Stone wrote: Those are actually unrelated--the big reason for the more permissive umask is to allow people to seamlessly work with other people in a group, especially within setgid shared directori

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Ansgar
On Wed, 2022-03-09 at 17:29 -0500, Michael Stone wrote: > Those are actually unrelated--the big reason for the more permissive > umask is to allow people to seamlessly work with other people in a > group, especially within setgid shared directories. Those shared > directories can be anywhere, and

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Michael Stone
On Tue, Mar 08, 2022 at 12:29:43PM -0700, Sam Hartman wrote: I don't think it makes sense to move toward 0700 home directories and to loosen the umask for usergroups. Those are actually unrelated--the big reason for the more permissive umask is to allow people to seamlessly work with other peo

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Pierre-Elliott Bécue
Considering many have replied, I'll stick to that one: Marc Haber wrote on 08/03/2022 at 17:49:04+0100: > (3) > #625758 > --disabled-password just does not set a password for the newly created > account (resulting in '*' in shadow) while --disabled-login places a '!' > in shadow. On modern syste

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Richard Laager
On 3/9/22 14:00, Marc Haber wrote: On Tue, 8 Mar 2022 17:02:06 -0600, Richard Laager wrote: On 3/8/22 10:49, Marc Haber wrote: (1a) would it be necessary to handle --system accounts differently? I think yes. > (1b) should we stay with 0755 for --system accounts? I don't see why syst

Re: adduser: disabling passwords, disabling logins

2022-03-09 Thread Marc Haber
On Tue, 8 Mar 2022 18:40:11 +, Simon McVittie wrote: >On Tue, 08 Mar 2022 at 17:49:04 +0100, Marc Haber wrote: >> (3) >> #625758 >> --disabled-password just does not set a password for the newly created >> account (resulting in '*' in shadow) while --disabled-login places a '!' >> in shadow. O

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Wed, 9 Mar 2022 14:10:04 +0100, Harald Dunkel wrote: >On 2022-03-08 17:49:04, Marc Haber wrote: >> (1a) would it be necessary to handle --system accounts differently? I >> think yes. > >I think it would be helpful to define "system account" and "normal user". >Neither adduser(8) nor usera

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Tue, 8 Mar 2022 17:02:06 -0600, Richard Laager wrote: >On 3/8/22 10:49, Marc Haber wrote: >> (1) >> #202943, #202944, #398793, #442627, #782001 >> The bug reporters are requesting the default for DIR_MODE to be changed >> from 0755 to 0700, making home directories readable for the user only. >>

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Tue, 8 Mar 2022 19:06:57 -0500, Timothy M Butterworth wrote: >On Tue, Mar 8, 2022 at 6:18 PM Richard Laager wrote: >Please add support for "." so we can use first.last names as user >names. Other Linux's are already doing this so it should not break >anything. Adduser can already be configure

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Wed, 9 Mar 2022 00:12:25 +0200, Adrian Bunk wrote: >On Tue, Mar 08, 2022 at 05:49:04PM +0100, Marc Haber wrote: >>... >> (2) >> #774046 #520037 >> Which special characters should we allow for account names? >> >> People demand being able to use a dot (which might break scripts using >> chown)

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Tue, 08 Mar 2022 20:48:46 +0100, Ansgar wrote: >On Tue, 2022-03-08 at 12:29 -0700, Sam Hartman wrote: >> > > > > >> Take a look at https://salsa.debian.org/vorlon/pam/-/merge_requests/3 >> >> According to the history of that patch, we have some old consensus to >> move toward usergroups and a

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Marc Haber
On Tue, 08 Mar 2022 12:29:43 -0700, Sam Hartman wrote: >Take a look at https://salsa.debian.org/vorlon/pam/-/merge_requests/3 As far as I understand, that's a PR against pam setting umask.to 002 on login, 022 for root. Especially the bug reports referenced there bring me directly and deeply into

Bug#1006977: ITP: open-plc-tools -- Toolkit for powerline network adapters with Atheros chipsets

2022-03-09 Thread Mark Hindley
Package: wnpp Severity: wishlist Owner: Mark Hindley * Package name: open-plc-tools Version : 0.0.6 Upstream Author : Qualcomm Atheros, Inc. * URL : https://github.com/qca/open-plc-utils * License : Clear BSD Programming Lang: C Description : Toolkit fo

Bug#1006972: ITP: node-tad -- Javascript test suite with minimal hassle

2022-03-09 Thread Yadd
Package: wnpp Severity: wishlist Owner: Yadd X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: node-tad Version : 3.1.0 Upstream Author : Mariusz Nowak * URL : https://github.com/medikoo/tad * License : ISC Programming Lang: JavaScript Descriptio

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Russ Allbery
Richard Laager writes: > Could we only have "3.0 (quilt)" then, no "3.0 (native)"? Or, put > differently, if you had a "native" package that is using a Debian > revision and we allow that, what difference is left between "3.0 > (native)" and "3.0 (quilt)"? 3.0 (quilt) always has two tarballs, on

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Richard Laager
On 3/9/22 10:38, Ian Jackson wrote: This prohibition exists solely because of a doctrinal objection to native-format packages with Debian revisions. As I understood it, the idea was that you could just increment the "actual" version number. I'm failing to see the advantage of incrementing "a"

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Ian Jackson
Sean Whitton writes ("Re: proposed MBF: packages still using source format 1.0"): > On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote: > > On 08/03/22 at 17:33 -0700, Sean Whitton wrote: > >> Lucas, as I've had a lot to do with these git workflows and have > >> probably done the most work do

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Lucas Nussbaum
On 09/03/22 at 08:52 -0700, Sean Whitton wrote: > On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote: > > Also, how would that work with packages that combine direct changes to > > upstream, and quilt for Debian-created patches? > > Could you expand? I didn't think this category was one of t

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Sean Whitton
Hello, On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote: > On 08/03/22 at 17:33 -0700, Sean Whitton wrote: >> Lucas, as I've had a lot to do with these git workflows and have >> probably done the most work documenting them, I can help with any >> specific follow-up questions you might have

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Simon McVittie
On Wed, 09 Mar 2022 at 14:10:04 +0100, Harald Dunkel wrote: > I think it would be helpful to define "system account" and "normal user". > Neither adduser(8) nor useradd(8) provide a sufficient definition, > especially wrt the existing network directory services (LDAP, AD, etc). > Is a "system user"

Re: Seeking consensus for some changes in adduser

2022-03-09 Thread Harald Dunkel
On 2022-03-08 17:49:04, Marc Haber wrote: (1a) would it be necessary to handle --system accounts differently? I think yes. I think it would be helpful to define "system account" and "normal user". Neither adduser(8) nor useradd(8) provide a sufficient definition, especially wrt the exist

Bug#1006965: ITP: python-datetimerange -- library that handles time ranges

2022-03-09 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: python-datetimerange Version : 1.2.0 Upstream Author : Tsuyoshi Hombashi * URL : https://github.com/thombashi/DateTimeRange * License : Expat P

Bug#1006964: ITP: python-typepy -- library for variable type checker/validator/converter at a run time

2022-03-09 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: python-typepy Version : 1.3.0 Upstream Author : Tsuyoshi Hombashi * URL : https://github.com/thombashi/typepy * License : Expat Programming Lan

Bug#1006963: ITP: python-mbstrdecoder -- multi-byte character string decoder

2022-03-09 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: python-mbstrdecoder Version : 1.1.0 Upstream Author : Tsuyoshi Hombashi * URL : https://github.com/thombashi/mbstrdecoder * License : Expat Pro

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Lucas Nussbaum
On 08/03/22 at 17:33 -0700, Sean Whitton wrote: > Lucas, as I've had a lot to do with these git workflows and have > probably done the most work documenting them, I can help with any > specific follow-up questions you might have. Thanks! So the main question I think I have is: can we find a midd

Re: proposed MBF: packages still using source format 1.0

2022-03-09 Thread Lucas Nussbaum
On 08/03/22 at 17:10 +0100, Johannes Schauer Marin Rodrigues wrote: > I did exactly that and rebuilt all the packages found by Lucas with the > following changes: > > $ mkdir -p debian/source > $ echo '3.0 (quilt)' >debian/source/format > > 141 source packages produce bit-by-bit reproduci