Package: adduser
Version: 3.121
Severity: minor

I have found that we actually don't have a possiblity to set default
supplementary groups for a newly created account. The only thing we have
is the EXTRA_GROUPS mechanism which is off by default. This kind of
surprises me.

Should we have a mechanism to be able to set supplemental groups for
newly created users independently of the EXTRA_GROUPS mechanism?

If so, I think the mechanism should look like:

Have a new configuration file option SUPPL_GROUPS and a
corresponding command line option --suppl-groups. If --supply-groups is
given, it completely overrides SUPPL_GROUPS. Add all newly created
non-system users to the groups listed.

Same mechanism for system users and SYS_SUPPL_GROUPS and --suppl-groups.

Should we decide to implement this, this obsoletes the suggested
solution for #678615 with more flexibility.

Greetings
Marc

Reply via email to