Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH v3] glep-0081: User and group management via dedicated packages
Date: Fri, 21 Jun 2019 13:09:15
Message-Id: 4fcf8e3ddc4fa13b40c2655a330aa673131eabcb.camel@gentoo.org
In Reply to: Re: [gentoo-dev] [PATCH v3] glep-0081: User and group management via dedicated packages by Andrew Savchenko
1 On Fri, 2019-06-21 at 15:02 +0300, Andrew Savchenko wrote:
2 > On Fri, 21 Jun 2019 09:18:23 +0200 David Seifert wrote:
3 > > On Fri, 2019-06-21 at 08:59 +0300, Andrew Savchenko wrote:
4 > > > On Thu, 20 Jun 2019 16:32:56 +0200 Michał Górny wrote:
5 > > > > On Thu, 2019-06-20 at 09:53 -0400, Brian Evans wrote:
6 > > > > > On 6/9/2019 7:39 AM, Michał Górny wrote:
7 > > > > > > +Tracking of user/group usage is done through dependencies. As
8 > > > > > > long
9 > > > > > > +as any installed package depends on a specific user/group
10 > > > > > > package,
11 > > > > > > +the respective user/group is assumed to be used. If no
12 > > > > > > package
13 > > > > > > +requiring the specific user/group is left, the package manager
14 > > > > > > +automatically prunes the package clearly indicating it is no
15 > > > > > > longer
16 > > > > > > +used.
17 > > > > >
18 > > > > > You cannot know when a name is "no longer used". An
19 > > > > > administrator could
20 > > > > > have adopted a username for other purposes.
21 > > > >
22 > > > > That's why we don't remove the actual user/group. However, this is
23 > > > > a valuable information to the administrator that no package is
24 > > > > using
25 > > > > the user/group in question.
26 > > >
27 > > > So how do you propose to clean them up? Or let user systems trash
28 > > > with unused uids/gids? The GLEP 81 only mensions some possible
29 > > > tooling for cleanup. Is there an implementation available? I don't
30 > > > see it within proposed patch sets.
31 > > >
32 > > > This GLEP should not be accepted unless all necessary tools are
33 > > > available including a cleanup tool.
34 > > >
35 > > > Best regards,
36 > > > Andrew Savchenko
37 > >
38 > > Strongly disagree:
39 > >
40 > > 1) User systems are already getting trashed. And apparently it's not a
41 > > critical thing that prevents users from using Gentoo in practice.
42 > > 2) A cleanup tool at best will only tell you which files you need to
43 > > check, randomly deleting files with orphaned uids/gids is not a good
44 > > idea.
45 >
46 > What will happen when some acct-*/* package will be unmerged? Will
47 > uid/gid record and/or its files be deteleted?
48 >
49
50 They will be marked as unused, locked from access and left in system
51 databases. It's both in the GLEP and in the implementation. All you
52 have to do is to read before complaining.
53
54 --
55 Best regards,
56 Michał Górny

Attachments

File name MIME type
signature.asc application/pgp-signature