Package: adduser
Version: 3.121
Severity: normal

I think that we should step away from --force-badname. That option is a
misnomer in the first place, as it doesnt FORCE a bad name. I can
adduser --force-badname zugschlus as well as without the option. In
fact, the option relaxes our default sanity checks for user names,
_allowing_ names that won't pass them. Internally, we are already doing
the right thing and called the variable allow_badname.

We have an ongoing discussion about allowed characters in user names
which might as well end up in the adduser-imposed restrictions for
non-system accounts being removed completely, so I'd recommend
addressing this bug report only after we have made up our mind whether
to keep this option in the first place.

If we decide to keep it, I suggest renaming it (to a new name that
matches our new policy, possibly --allow-badname or
--no-check-name-regex) and keeping the old name for a BIG number of
release cycles since we have nearly a hundred packages in the archive
that use --force-badname.

Greetings
Marc

Reply via email to