Bug#1004284: tomcat9: postinst creates wrong userhome via systemd-sysusers

2022-02-07 Thread Markus Koschany
Control: tags -1 moreinfo

Hello,

 
> Dear Maintainer,
> 
> Debian creates in the postinst script via systemd-sysusers
> a system user named tomcat whose home directory is /var/lib/tomcat. 
> This directory does not exist, but /var/lib/tomcat9

The idea was to create a general tomcat system user but without an existing
home directory for security reasons. Note that the shell is set to
/usr/sbin/nologin too.

Previously we created a new tomcat user for every new major version. You could
end up with several tomcat users on a normal server and that was not really
desirable. In theory it should be possible to install multiple major versions
on the same server by now (tomcat9 and tomcat10) but there are some bugs in
tomcat10 which require some attention before we can call this task as complete.

Is there anything we missed or can we close this bug report ?

Regards,

Markus



signature.asc
Description: This is a digitally signed message part


Bug#1004284: tomcat9: postinst creates wrong userhome via systemd-sysusers

2022-01-24 Thread Karsten Schöke
Package: tomcat9
Version: 9.0.43-2~deb11u3
Severity: important

Dear Maintainer,

Debian creates in the postinst script via systemd-sysusers
a system user named tomcat whose home directory is /var/lib/tomcat. 
This directory does not exist, but /var/lib/tomcat9

-- System Information:
Debian Release: 11.2
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-11-amd64 (SMP w/4 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages tomcat9 depends on:
ii  lsb-base11.1.0
ii  systemd 247.3-6
ii  tomcat9-common  9.0.43-2~deb11u3
ii  ucf 3.0043

Versions of packages tomcat9 recommends:
ii  libtcnative-1  1.2.26-1

Versions of packages tomcat9 suggests:
ii  tomcat9-admin 9.0.43-2~deb11u3
pn  tomcat9-docs  
pn  tomcat9-examples  
pn  tomcat9-user  

-- no debconf information