On 14-Oct-2005, Marc Haber wrote:
> Policy 9.2.1 says:
> Packages other than base-passwd must not modify /etc/passwd,
> /etc/shadow, /etc/group or /etc/gshadow.
> 
> This makes, for example, the passwd package RC buggy since useradd
> modifies /etc/passwd.

I don't think that can be interpreted as "the package modifies
/etc/passwd"; it's a command already installed on the system, not part
of a package.

Isn't every proscription in Policy to be taken in the context of
packages, not behaviour of already-installed system commands?

> Also exim4 is RC buggy since its maintainer scripts modify
> /etc/passwd by calling adduser which in turn calls useradd which in
> turn modifies /etc/passwd while not belonging to base-passwd.

That's borderline enough to need clarification, I agree.

> The section in the policy should say
> Packages other than base-passwd must not modify /etc/passwd,
> /etc/shadow, /etc/group or /etc/gshadow directly from their maintainer
> scripts.

I'd suggest:

Maintainer scripts for packages must not modify any of /etc/passwd,
/etc/shadow, /etc/group or /etc/shadow, with the sole exception of the
base-passwd package.

-- 
 \     "If you're a horse, and someone gets on you, and falls off, and |
  `\      then gets right back on you, I think you should buck him off |
_o__)                                     right away."  -- Jack Handey |
Ben Finney <[EMAIL PROTECTED]>

Attachment: signature.asc
Description: Digital signature

Reply via email to