groupdel in a spec file

[Axel Thimm]

On Sun, Aug 20, 2006 at 03:16:52PM +0100, Paul wrote:
> Hi,
> 
> I have a package I'm reviewing which has a groupdel in the postun which
> rpmlint is quite rightly objecting to (though only at a warning level
> and doesn't mind groupadd being used).
> 
> Is there any caveats for checking to ensure that other users won't have
> things broken should the rpm be removed? Or anything else that should be
> observed prior to the groupdel being executed?

Removing a user/group is only 100% safe to not casue issues, if it is
certain that no files remain which carry these ids. This includes
files generated outside the package's known file space, for example a
local (backup) copy.

Whether this is enough to have a general policy against removing
users/groups is a different strory. Maybe there is a global guideline
or even rule somewhere in the wiki. If not you would have to check the
package's functionality to judge on a case-by-case basis, there is no
general answer possible.

For example say removing an MTA's user/group and recycling it for a
games group means that all games will be able to read any old mails in
the MTA's queues. The other way around (the MTA reading the gamers'
savefiles) is probably not as severe :)
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-extras-list/attachments/20060820/a058aada/attachment.sig>