[Fedora-packaging] User IDs in Core packages?

Sarantis Paskalis paskalis at di.uoa.gr
Thu Feb 1 11:18:52 UTC 2007


Hello,

Is there any recommendation for mandating/enforcing/changing etc. user 
IDs in (previously) Core packages?  There are some rpm packages in the 
upcomming merge that hardcode a specific UID in the specfile to use (I 
was looking at privoxy, which hardcodes the number 73).

The documentation at http://fedoraproject.org/wiki/PackageUserCreation 
recommends fedora-usermgmt but the text seemed to imply that it were for 
Extras packages only.

Is it implied that the default /etc/passwd file should contain the
predefined values for the most important packages and the rest should
find an alternative way?  What is the procedure of allocating UIDs/GIDs 
to those system users (examples are haldaemon, apache, dbus, sshd, rpc 
to name a few).

Should the packages to be reviewed maintain their existing UIDs/GIDs 
hardcoded and document it somewhere?

The default values in /etc/passwd and /etc/group are the following 
(taken from setup-2.6.2-1.fc7.src.rpm in rawhide):

#/etc/passwd
root:*:0:0:root:/root:/bin/bash
bin:*:1:1:bin:/bin:/sbin/nologin
daemon:*:2:2:daemon:/sbin:/sbin/nologin
adm:*:3:4:adm:/var/adm:/sbin/nologin
lp:*:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:*:5:0:sync:/sbin:/bin/sync
shutdown:*:6:0:shutdown:/sbin:/sbin/shutdown
halt:*:7:0:halt:/sbin:/sbin/halt
mail:*:8:12:mail:/var/spool/mail:/sbin/nologin
news:*:9:13:news:/etc/news:
uucp:*:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:*:11:0:operator:/root:/sbin/nologin
games:*:12:100:games:/usr/games:/sbin/nologin
gopher:*:13:30:gopher:/var/gopher:/sbin/nologin
ftp:*:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:*:99:99:Nobody:/:/sbin/nologin

#/etc/group
root::0:root
bin::1:root,bin,daemon
daemon::2:root,bin,daemon
sys::3:root,bin,adm
adm::4:root,adm,daemon
tty::5:
disk::6:root
lp::7:daemon,lp
mem::8:
kmem::9:
wheel::10:root
mail::12:mail
news::13:news
uucp::14:uucp
man::15:
games::20:
gopher::30:
dip::40:
ftp::50:
lock::54:
nobody::99:
users::100:


Thanks,

-- Sarantis




More information about the Fedora-packaging mailing list