[UBI] unexplained group render in ubi:8.1

[Scott McCarty]

Yanchen,
    I found out it's used by systemd. Unless you are using ubi-init, I
suspect this UID could be re-used.

“rpm -qa --qf "[%{NAME}\n]" --scripts” eventually leads to:

commit db8b8fe77ce30244ad82e70ec4e8302b0c9dbf41
Author: Yu Watanabe <watanabe.yu+github at gmail.com>
Date:   Tue Dec 12 14:28:11 2017 +0900

    create render group, remove groups for timesync, journal-gateway and
journal-upload

<
https://src.fedoraproject.org/rpms/systemd/c/db8b8fe77ce30244ad82e70ec4e8302b0c9dbf41
>

It's implementing this systemd change:

commit 4e15a7343cb389e97f3eb4f49699161862d8b8b2
Author: Tom Stellard <tstellar at redhat.com>
Date:   Tue Oct 31 08:46:24 2017 -0700

    udev-rules: Permission changes for /dev/dri/renderD*

    - Remove the uaccess tag from /dev/dri/renderD*.
    - Change the owning group from video to render.
    - Change default mode to 0666.
    - Add an option to allow users to set the access mode for these devices
at
    compile time.

<
https://github.com/systemd/systemd/commit/4e15a7343cb389e97f3eb4f49699161862d8b8b2
>

Best Regards
Scott M

On Tue, Jul 7, 2020 at 10:58 AM Yuanchen Lu <Yuanchen.Lu at ibm.com> wrote:

> Hello,
>
> I'm using a base image of "registry.access.redhat.com/ubi8/ubi:8.1" to
> build an application. I need to assign a group with id 998 because of a
> legacy fileset (data was previously owned by a user in that group).
> However, it seems group 998 is already assigned to "render":
>
>
> cat /etc/group | grep 998
>
> render:x:*998*:
>
>
> Is there any documentation available explaining what this "render" group
> is for? Would it be safe to remove the group to free up group id 998?
>
> Thanks in advance,
> Yuanchen Lu
>
>
> _______________________________________________
> Ubi mailing list
> Ubi at redhat.com
> https://www.redhat.com/mailman/listinfo/ubi
>


-- 

--

A Comparison of Linux Container Images:
http://crunchtools.com/comparison-linux-container-images/

--

Scott McCarty
Product Management - Containers, Red Hat Enterprise Linux & OpenShift
Email: smccarty at redhat.com
Phone: 312-660-3535
Cell: 330-807-1043
Web: http://crunchtools.com

Using Azure Pipelines with Red Hat Universal Base Image and Quay.io:
https://red.ht/2TvYo3Y
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/ubi/attachments/20200707/d8f52a7c/attachment.htm>