Bug#924105: Need to add group creation to postinst script

[Jason Guy]

I see now...

dpkg-statoverride: error: group '_kea' does not exist

I will fix this...

Jason


On Thu, Jun 6, 2019 at 10:06 AM Jason Guy  wrote:

> Hi Shane,
>
> Thanks for the help on this. I thought the username is automatically
> created with a group of the same name, as part of user creation.
> Is the _kea group not getting created when you installed it? Please let me
> know what OS and version you tested on.
>
> I see there is a loop that also set the user and group for all files in
> /var/log/kea:
>
>for d in /var/log/kea /var/lib/kea; do
> if ! dpkg-statoverride --list $d >/dev/null 2>&1; then
> dpkg-statoverride --update --add *_kea _kea 0750 $d*
> fi
> done
>
> This _kea user is new in 1.5.0, for security, so it is only done for the
> debian/ubuntu package installs.
>
> Thanks,
> Jason
>
> On Fri, Apr 26, 2019 at 4:33 PM Shane Spencer  wrote:
>
>> addgroup --force-bad-name --system _kea
>> adduser ...
>> adduser _kea _kea
>>
>> That way kea is run as _kea.nogroup with access to _kea group.
>>
>> Not sure about those names either.  Is that standard for kea installs?
>>
>> 
>> Shane Spencer
>> about.me/ShaneSpencer
>> 
>>
>

Bug#924105: Need to add group creation to postinst script

[Jason Guy]

Hi Shane,

Thanks for the help on this. I thought the username is automatically
created with a group of the same name, as part of user creation.
Is the _kea group not getting created when you installed it? Please let me
know what OS and version you tested on.

I see there is a loop that also set the user and group for all files in
/var/log/kea:

   for d in /var/log/kea /var/lib/kea; do
if ! dpkg-statoverride --list $d >/dev/null 2>&1; then
dpkg-statoverride --update --add *_kea _kea 0750 $d*
fi
done

This _kea user is new in 1.5.0, for security, so it is only done for the
debian/ubuntu package installs.

Thanks,
Jason

On Fri, Apr 26, 2019 at 4:33 PM Shane Spencer  wrote:

> addgroup --force-bad-name --system _kea
> adduser ...
> adduser _kea _kea
>
> That way kea is run as _kea.nogroup with access to _kea group.
>
> Not sure about those names either.  Is that standard for kea installs?
>
> 
> Shane Spencer
> about.me/ShaneSpencer
> 
>

Bug#924105: Need to add group creation to postinst script

[Shane Spencer]

addgroup --force-bad-name --system _kea
adduser ...
adduser _kea _kea

That way kea is run as _kea.nogroup with access to _kea group.

Not sure about those names either.  Is that standard for kea installs?

Shane Spencer
about.me/ShaneSpencer