Package: libpam-modules

(Filing this, to track the TODOs from the discussion that followed
http://lists.debian.org/debian-devel/2010/05/msg00887.html)

A private group is identifiable by username==groupname, UID==GID and:

> 2) A special case is true: The group is set as the main group of the
>    user (in /etc/passwd) while the user is NOT added to his group
>    in /etc/groups.

(Other users can intentionally be added to the private group, i.e. if
the user is a sub-user of a user, or an account
that runs some software whose data should be writeable to mutliple
users.)

Testing for this special case allows deluser to remove the UPG together
with the user, when deleting the user (and the group is empty).

And testing this will prevent pam_umask from misdetecting a private
user group in some cases where user/group names and IDs do only match
randomly.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to