Gentoo Archives: gentoo-dev

From: Thomas Deutschmann <whissi@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Re: [PATCH] acct-user.eclass: don't modify existing user by default
Date: Mon, 04 Jan 2021 18:23:49
Message-Id: dd9cbc67-89ab-72da-ae4a-c98b9640ec16@gentoo.org
In Reply to: Re: [gentoo-dev] Re: [PATCH] acct-user.eclass: don't modify existing user by default by Michael Orlitzky
1 Hi,
2
3 On 2021-01-04 19:07, Michael Orlitzky wrote:
4 > We could implement this with something like an /etc/users.d directory
5 > that would be populated with entries by either the admin or package
6 > manager with CONFIG_PROTECT enabled. Then the system database would be
7 > updated by running something like "users-update" (cf. env-update). The
8 > essential problem that we need to work around is that e.g. /etc/passwd
9 > is "owned" by multiple system packages.
10 >
11 > I think this would accomplish what you and Robin are talking about, but
12 > it wouldn't solve whissi's problem since it's still a Gentoo-specific
13 > solution.
14
15 If you really want to spend so much time on this, feel free to implement
16 something like this. From my point of view this is wasted time. I really
17 have no words for anyone believing that there must be a way to deal with
18 user config. This is a no go for me and most people in my bubble. Once
19 you have created something, it's user data. If you want to make changes,
20 tell the user about it but never ever mess with user configs. History is
21 full of examples when messing with user configs caused real harm.
22
23 For example there is a reason why we don't edit /etc files. Instead have
24 CONFIG_PROTECT and are only providing helpers to update config.
25
26 Do I really need to explain what can go wrong when you suddenly change
27 /home? What will happen to your cron jobs for example?
28
29 What will happen when you make changes to groups and reboot?
30
31 But as said, if you want to spend so much time on this and create a
32 complicated solution which will be adding a lot of complexity which I
33 think isn't worth it, *I* could live with it. It's the same like dealing
34 with CONFIG_PROTECT already.
35
36 People like me could just ignore changed users if changes won't go live
37 until you run said users-update command or make use of INSTALL_MASK.
38
39
40 --
41 Regards,
42 Thomas Deutschmann / Gentoo Linux Developer
43 fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5

Attachments

File name MIME type
OpenPGP_signature.asc application/pgp-signature

Replies