Re: Towards enabling rpm sysusers integration

2023-07-24 Thread Florian Festi
On 6/29/23 09:55, Panu Matilainen wrote: > The rpm integration doesn't technically require systemd-sysusers, we can > write a script that calls useradd/groupadd instead. So for us it becomes > a choice between writing that script or adding audit support to > systemd-sysusers. Writing a script based

Re: Towards enabling rpm sysusers integration

2023-06-30 Thread Colin Walters
On Thu, Jun 29, 2023, at 3:55 AM, Panu Matilainen wrote: >> last time I looked auditd is started later than >> systemd-sysusers. Hence not sure if sysusers would actually generate >> audit messages that auditd could pick them up. > > For the rpm integration, "started later" is irrelevant as the us

Re: Towards enabling rpm sysusers integration

2023-06-29 Thread Panu Matilainen
On 6/28/23 17:15, Lennart Poettering wrote: On Di, 27.06.23 12:04, Panu Matilainen (pmati...@redhat.com) wrote: On 6/22/23 19:55, Steve Grubb wrote: https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format I would caution against this whole proposal. Not that I'm against it, but ju

Re: Towards enabling rpm sysusers integration

2023-06-28 Thread Steve Grubb
On Wednesday, June 28, 2023 10:15:48 AM EDT Lennart Poettering wrote: > On Di, 27.06.23 12:04, Panu Matilainen (pmati...@redhat.com) wrote: > > On 6/22/23 19:55, Steve Grubb wrote: > > > > https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format > > > > > > I would caution against this wh

Re: Towards enabling rpm sysusers integration

2023-06-28 Thread Lennart Poettering
On Di, 27.06.23 12:04, Panu Matilainen (pmati...@redhat.com) wrote: > On 6/22/23 19:55, Steve Grubb wrote: > > > > https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format > > > > I would caution against this whole proposal. Not that I'm against it, but > > just saying be careful doing it

Re: Towards enabling rpm sysusers integration

2023-06-27 Thread Panu Matilainen
On 6/22/23 19:55, Steve Grubb wrote: https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format I would caution against this whole proposal. Not that I'm against it, but just saying be careful doing it. People often forget about our security concerns. Currently, shadow-utils has about 4

Re: Towards enabling rpm sysusers integration

2023-06-26 Thread Lennart Poettering
On Do, 22.06.23 10:25, Chris Adams (li...@cmadams.net) wrote: > Once upon a time, Zbigniew Jędrzejewski-Szmek said: > > I was hoping we would be make the dependency on setup optional. > > It is a fairly heavyweight package (700+ kb) and with lots of > > not-that-useful-on-a-typical-modern-install

Re: Towards enabling rpm sysusers integration

2023-06-26 Thread Panu Matilainen
On 6/23/23 21:20, Michal Domonkos wrote: On Thu, Jun 22, 2023 at 01:18:27PM +0300, Panu Matilainen wrote: Now that the initial hurdle of getting rpm 4.19 into rawhide is over, it's time to start looking towards enabling the sysusers integration: https://rpm-software-management.github.io/rpm/manu

Re: Towards enabling rpm sysusers integration

2023-06-25 Thread Panu Matilainen
On 6/22/23 18:01, Zbigniew Jędrzejewski-Szmek wrote: On Thu, Jun 22, 2023 at 01:18:27PM +0300, Panu Matilainen wrote: Hey all, Now that the initial hurdle of getting rpm 4.19 into rawhide is over, it's time to start looking towards enabling the sysusers integration: https://rpm-software-managem

Re: Towards enabling rpm sysusers integration

2023-06-25 Thread Panu Matilainen
On 6/22/23 19:55, Steve Grubb wrote: Hello, On Thursday, June 22, 2023 11:01:28 AM EDT Zbigniew Jędrzejewski-Szmek wrote: 2. systemd provides users and groups that are actually owned by the setup package. As rpm is now turning non-root file ownership into dependencies, systemd could end up pull

Re: Towards enabling rpm sysusers integration

2023-06-25 Thread Florian Weimer
* Zbigniew Jędrzejewski-Szmek: > On Thu, Jun 22, 2023 at 10:25:10AM -0500, Chris Adams wrote: >> Once upon a time, Zbigniew Jędrzejewski-Szmek said: >> > I was hoping we would be make the dependency on setup optional. >> > It is a fairly heavyweight package (700+ kb) and with lots of >> > not-tha

Re: Towards enabling rpm sysusers integration

2023-06-24 Thread Michal Domonkos
On Sat, Jun 24, 2023 at 01:22:22AM +, Zbigniew Jędrzejewski-Szmek wrote: > I don't think so. Either way, the actual implementation is going to be a call > to > systemd-sysusers. But the rpm-internal approach is quite different in how the > call is constructed from the macro-based approach, so

Re: Towards enabling rpm sysusers integration

2023-06-23 Thread Chris Adams
Once upon a time, Zbigniew Jędrzejewski-Szmek said: > getservbyname would use /etc/services, but I'm not sure how widely it is used. > A lot of code just hardcodes a specific number… Local configuration for > port numbers is a concept that only works if somebody synchronizes the > file across mach

Re: Towards enabling rpm sysusers integration

2023-06-23 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Jun 23, 2023 at 08:20:58PM +0200, Michal Domonkos wrote: > On Thu, Jun 22, 2023 at 01:18:27PM +0300, Panu Matilainen wrote: > > Now that the initial hurdle of getting rpm 4.19 into rawhide is over, it's > > time to start looking towards enabling the sysusers integration: > > https://rpm-sof

Re: Towards enabling rpm sysusers integration

2023-06-23 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Jun 22, 2023 at 10:25:10AM -0500, Chris Adams wrote: > Once upon a time, Zbigniew Jędrzejewski-Szmek said: > > I was hoping we would be make the dependency on setup optional. > > It is a fairly heavyweight package (700+ kb) and with lots of > > not-that-useful-on-a-typical-modern-installat

Re: Towards enabling rpm sysusers integration

2023-06-23 Thread Michal Domonkos
On Thu, Jun 22, 2023 at 01:18:27PM +0300, Panu Matilainen wrote: > Now that the initial hurdle of getting rpm 4.19 into rawhide is over, it's > time to start looking towards enabling the sysusers integration: > https://rpm-software-management.github.io/rpm/manual/users_and_groups.html [...] > 3.

Re: Towards enabling rpm sysusers integration

2023-06-23 Thread Miroslav Suchý
Dne 22. 06. 23 v 17:01 Zbigniew Jędrzejewski-Szmek napsal(a): I don't remember seeing an actual Fedora Change for either file-trigger enablement or current %sysuser_* macros so I'm not sure it's needed here either? https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format Please create

Re: Towards enabling rpm sysusers integration

2023-06-22 Thread Steve Grubb
Hello, On Thursday, June 22, 2023 11:01:28 AM EDT Zbigniew Jędrzejewski-Szmek wrote: > > 2. systemd provides users and groups that are actually owned by the setup > > package. As rpm is now turning non-root file ownership into dependencies, > > systemd could end up pulled in where setup is needed

Re: Towards enabling rpm sysusers integration

2023-06-22 Thread Chris Adams
Once upon a time, Zbigniew Jędrzejewski-Szmek said: > I was hoping we would be make the dependency on setup optional. > It is a fairly heavyweight package (700+ kb) and with lots of > not-that-useful-on-a-typical-modern-installation stuff (mail alias support, > csh profile, /etc/hosts, nfs exports

Re: Towards enabling rpm sysusers integration

2023-06-22 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Jun 22, 2023 at 01:18:27PM +0300, Panu Matilainen wrote: > Hey all, > > Now that the initial hurdle of getting rpm 4.19 into rawhide is over, it's > time to start looking towards enabling the sysusers integration: > https://rpm-software-management.github.io/rpm/manual/users_and_groups.html

Towards enabling rpm sysusers integration

2023-06-22 Thread Panu Matilainen
Hey all, Now that the initial hurdle of getting rpm 4.19 into rawhide is over, it's time to start looking towards enabling the sysusers integration: https://rpm-software-management.github.io/rpm/manual/users_and_groups.html We (as in rpm-team) are not pushing for doing all this in Fedora 39,