Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-31 Thread Jaco Kroon
Hi, On 2019/05/29 18:01, Michael Orlitzky wrote: On 5/29/19 5:50 AM, Jaco Kroon wrote: This GLEP follows the best practice of leaving obsolete user/groups accounts intact. This guarantees that no files with stale ownership are left (e.g. on unmounted filesystems) and that the same UID/GID is

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michał Górny
On Wed, 2019-05-29 at 09:28 +0200, Michał Górny wrote: > Hi, > > Here's a reiteration (or well, rewrite) of mjo's earlier work [1]. I've > made it into more GLEP-ish form, removed inline code samples which > belong in implementation part and did some changes. > > The main change from the

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michael Orlitzky
On 5/29/19 3:28 AM, Michał Górny wrote: > > Home directory ownership > > > If the user in question uses a regular home directory (i.e. not > ``/dev/null``), the user package should maintain the directory > via ``keepdir`` command. This allows for clean removal of the

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michael Orlitzky
On 5/29/19 5:50 AM, Jaco Kroon wrote: >> >> This GLEP follows the best practice of leaving obsolete user/groups >> accounts intact. This guarantees that no files with stale ownership are >> left (e.g. on unmounted filesystems) and that the same UID/GID is not >> reused for another user/group. >

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michael Orlitzky
On 5/29/19 4:01 AM, Ulrich Mueller wrote: > > I wonder why that would be needed. It won't catch collisions with users > created by the system administrator. The reference implementation did its best not to annoy you here. Ultimately, no, it can't prevent the system administrator from clobbering

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Robin H. Johnson
On Wed, May 29, 2019 at 12:25:59PM +0200, Michał Górny wrote: > On Wed, 2019-05-29 at 11:50 +0200, Jaco Kroon wrote: > > Hi Michal, > > > > This sounds sensible and is an interesting approach. I kinda like it. > > > > There is only one technical comment I have based on the earlier > >

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michał Górny
On Wed, 2019-05-29 at 11:50 +0200, Jaco Kroon wrote: > Hi Michal, > > This sounds sensible and is an interesting approach. I kinda like it. > > There is only one technical comment I have based on the earlier > discussion, not addressed. > > What if users needs to be created into a centralized

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michał Górny
On Wed, 2019-05-29 at 10:01 +0200, Ulrich Mueller wrote: > > > > > > On Wed, 29 May 2019, Michał Górny wrote: > > User/group name/identifier collision detection > > -- > > The user/group packages can install additional files in subdirectories > > of

Re: [gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Jaco Kroon
Hi Michal, This sounds sensible and is an interesting approach.  I kinda like it. There is only one technical comment I have based on the earlier discussion, not addressed. What if users needs to be created into a centralized UID/GID system to be pulled in via nss? So calling system tools

[gentoo-dev] [pre-GLEP] User and group management via dedicated packages

2019-05-29 Thread Michał Górny
Hi, Here's a reiteration (or well, rewrite) of mjo's earlier work [1]. I've made it into more GLEP-ish form, removed inline code samples which belong in implementation part and did some changes. The main change from the earlier proposal is that we are extremely careful not to break stuff.