Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-30 Thread David Kalnischkies
On Mon, Aug 30, 2021 at 11:53:59AM +0100, Colin Watson wrote: > On Mon, Aug 30, 2021 at 12:30:49PM +0200, David Kalnischkies wrote: > > So, while for some/most usecases something akin to DynamicUser would be > > enough, for others a more stable user would be preferred and then there > > are also

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-30 Thread Colin Watson
On Mon, Aug 30, 2021 at 12:30:49PM +0200, David Kalnischkies wrote: > On Sun, Aug 29, 2021 at 11:30:41PM +0100, Colin Watson wrote: > > case) it seems mostly like the sort of user that could be anonymous > > outside of the lifetime of an apt process, analogous to systemd's > > DynamicUser. > >

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-30 Thread David Kalnischkies
On Sun, Aug 29, 2021 at 11:30:41PM +0100, Colin Watson wrote: > case) it seems mostly like the sort of user that could be anonymous > outside of the lifetime of an apt process, analogous to systemd's > DynamicUser. The _apt user started as 'nobody', but quickly people complained that they didn't

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-30 Thread Julian Andres Klode
On Sun, Aug 29, 2021 at 11:30:41PM +0100, Colin Watson wrote: > On Sun, Aug 29, 2021 at 11:31:05AM -0700, Russ Allbery wrote: > > Colin Watson writes: > > > I think it's an interesting idea and worth pursuing, but on the face of > > > it it seems that this would end up violating policy 9.2.2: > >

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-29 Thread Colin Watson
On Sun, Aug 29, 2021 at 11:31:05AM -0700, Russ Allbery wrote: > Colin Watson writes: > > I think it's an interesting idea and worth pursuing, but on the face of > > it it seems that this would end up violating policy 9.2.2: > > > "Globally allocated by the Debian project, the same on every

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-29 Thread Marco d'Itri
On Aug 29, Colin Watson wrote: > I can see the issue there. Adding another prompt that every Debian user > will need to consider on upgrade to the next release is pretty > undesirable, though - I actively try to avoid that in base-passwd > changes. So maybe the policy violation, i.e. ending up

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-29 Thread Russ Allbery
Colin Watson writes: > I think it's an interesting idea and worth pursuing, but on the face of > it it seems that this would end up violating policy 9.2.2: > "Globally allocated by the Debian project, the same on every Debian > system." > ... because the UID of the _apt user in fact

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-29 Thread Colin Watson
[For debian-devel readers; the original stated motivation for this bug was being able to trim down the de-facto-essential set by removing adduser from it.] On Wed, Aug 25, 2021 at 09:54:35AM +0200, Johannes Schauer Marin Rodrigues wrote: > Quoting Helmut Grohne (2020-09-06 09:48:26) > > Another