>>>>> On Thu, 11 Nov 2021, James Cloos wrote:

> gentoo definitely should not permit fixed use for installed packages
> in the 500-600 range.

> 500+ was for many, many years the start for users, and forcing anyone
> to change decades-long use of particular uids or gods is not
> acceptable.

> really all of 101-499,701-999,60000-{nobody--} should be dynamic.

> and 500-700 never touched by the distribution.

I have a snapshot of a Gentoo system from 2004 (sys-apps/shadow-4.0.3-r9
and sys-apps/pam-login-3.14). Its login.defs has the following:

   #
   # Min/max values for automatic uid selection in useradd
   #
   UID_MIN                  1000
   UID_MAX                 60000

I see the same values in sys-apps/shadow/files/login.defs for the first
version of shadow in the tree (sys-apps/shadow-19990827-r1, committed on
2000-08-02).

So, I would conclude that Gentoo always used 1000 as minimum UID.

We could of course leave a gap for now, and allocate only 600..799.
This would leave the 500s for compatibility with very old systems.
It would have the additional advantage that we get an earlier warning
once the new range will be almost full. Even if we then allow IDs in the
60000s range, we presumably should keep some reserves of low IDs for
packages that really need them to be there.

Ulrich

Attachment: signature.asc
Description: PGP signature

Reply via email to