Package: debian-policy
Version: 3.9.8.0
Severity: wishlist

Policy section "Permissions and owners" probably shouldn't recommend
contacting the base-passwd maintainer when selecting a username for a
dynamically-allocated UID created by a postinst maintscript.  It should
continue to recommend contacting the base-passwd maintainer when the
postinst script needs to create a static UID.

The current base-passwd maintainer explains the reasoning for this
suggested change:

----- Forwarded message from Colin Watson <cjwat...@debian.org> -----

Date: Sun, 23 Oct 2016 23:42:55 +0100
From: Colin Watson <cjwat...@debian.org>
To: Sean Whitton <spwhit...@spwhitton.name>
Cc: debian-de...@lists.debian.org
Subject: Re: Keysafe dynamic UID
User-Agent: Mutt/1.5.23 (2014-03-12)
Message-ID: <20161023224255.gh14...@riva.ucam.org>

On Sat, Oct 22, 2016 at 02:57:23PM -0700, Sean Whitton wrote:
> I am packaging Keysafe,[1] and the binary package keysafe-server needs
> to create a new system user with a dynamically allocated UID.
> 
> I am using the username 'keysafe'.  I do not anticipate any collision
> with any other package, but policy says I should e-mail you to confirm
> that.

Policy should probably only suggest emailing the base-passwd maintainer
in the case where you need a statically-allocated ID (I'm not
necessarily in a good position to judge uniqueness of
dynamically-allocated IDs across the whole archive, and the chances of
me requesting that you use a statically-allocated ID rather than the
other way round are vanishingly small).

In any case, I have no issues with this request.

Thanks,

-- 
Colin Watson                                       [cjwat...@debian.org]

----- End forwarded message -----

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply via email to