Package: adduser Version: 3.117 Severity: normal Hi,
adduser --force-badname allows an all-digit username such as 1000 to be given. That should be disallowed, as it causes interesting issues with tools like chown which use all-digit input to decide whether the user is talking uid or user name. If one uses adduser --force-badname with an all-digit user name, it creates the corresponding group and then fails to put the new user into the group. Greetings Marc -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.15.6-zgws1 (SMP w/6 CPU cores) Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8), LANGUAGE=en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages adduser depends on: ii debconf [debconf-2.0] 1.5.65 ii passwd 1:4.5-1 adduser recommends no packages. Versions of packages adduser suggests: ii liblocale-gettext-perl 1.07-3+b3 ii perl 5.26.1-5 -- debconf information excluded
