Gentoo Archives: gentoo-dev

From: Michael Orlitzky <mjo@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] RFC: UID/GID assignment for dovecot (76)
Date: Thu, 15 Aug 2019 18:58:26
Message-Id: 8018de5e-e5e3-c500-2f59-c09c21932223@gentoo.org
In Reply to: [gentoo-dev] RFC: UID/GID assignment for dovecot (76) by Eray Aslan
1 On 8/7/19 5:24 AM, Eray Aslan wrote:
2 > I would like to reserve UID/GID 76 for dovecot (net-mail/dovecot)
3 >
4 > This id differs from what we have provided historically (97) but gid/97
5 > is used by acct-group/input. So use 76 instead.
6 >
7 > This id is the same in Arch (76) but differs from Redhat (97).
8 >
9
10 Can we please go back to posting the patches for these new packages?
11 Personally, I couldn't care less what integer people pick out of a hat.
12 I review these to prevent situations like this:
13
14 # acct-user/postmaster
15 DESCRIPTION="Postmaster user"
16 ACCT_USER_ID=14
17 ACCT_USER_HOME=/var/spool/mail
18 ACCT_USER_HOME_OWNER=root:mail
19 ACCT_USER_HOME_PERMS=03775
20 ACCT_USER_GROUPS=( mail )
21
22 # acct-user/mail
23 DESCRIPTION="Mail program user"
24 ACCT_USER_ID=8
25 ACCT_USER_HOME=/var/spool/mail
26 ACCT_USER_HOME_OWNER=root:mail
27 ACCT_USER_HOME_PERMS=03775
28 ACCT_USER_GROUPS=( mail )
29
30 These two now need to be kept in-sync forever, because otherwise one is
31 going to clobber the permissions on the other's home directory. Not
32 having to worry about that was an explicit goal of GLEP81.
33
34 Given that both of those users are pulled in only by net-mail/mailbase
35 at the moment, you probably want to set those permissions in the ebuild,
36 and leave those two users' home directories at the default. The
37 net-mail/mailbase package certainly doesn't need their home directories
38 set to anything in particular. (It doesn't need the user at all, but
39 that's probably a larger issue with mailbase.)

Replies

Subject Author
Re: [gentoo-dev] RFC: UID/GID assignment for dovecot (76) Eray Aslan <eras@g.o>