Bug 457593

Summary: Request official assignment of uid/gid pair for trousers
Product: Red Hat Enterprise Linux 5 Reporter: IBM Bug Proxy <bugproxy>
Component: setupAssignee: Ondrej Vasik <ovasik>
Status: CLOSED ERRATA QA Contact: BaseOS QE <qe-baseos-auto>
Severity: high Docs Contact:
Priority: high    
Version: 5.5CC: ejratl, jjarvis, rvokal
Target Milestone: alphaKeywords: OtherQA
Target Release: 5.4   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-05-14 07:41:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 481160    

Description IBM Bug Proxy 2008-08-01 17:20:18 UTC
=Comment: #0=================================================
Emily J. Ratliff <emilyr.com> - 2008-08-01 11:37 EDT
---Problem Description---
I would like to request official assignment of a uid/gid for use by the trousers
package. TrouSerS upstream uses tss/tss as the user and group names.
 
Contact Information = Emily Ratliff/emilyr.com
 
 
---Security Component Data---
Userspace tool common name: tcsd


Userspace rpm: trousers

Comment 1 IBM Bug Proxy 2008-08-01 17:35:09 UTC
Hi, I mirrored this bug from the LTC bugzilla to the RH bugzilla against the
trousers component. I believe that is wrong, but I don't know which component
owns this particular bug. I changed the owner of the bug to Philip Knirsch.

Comment 2 Steve Grubb 2008-08-04 21:00:35 UTC
Emily, why do you want uid/gid pair? If I remember, there were lots of problems changing uid/gid in the trousers package.

Comment 3 Emily Ratliff 2008-08-04 21:23:30 UTC
Hi Steve,

The primary reason is that it can be included in the Common Criteria certified stack for free if tcsd does not run as root.

Additionally, I would like to minimize the number of daemons running as root by default. And TrouSerS upstream runs tcsd as tss exclusively.

In Fedora it is currently installing under tss/tss despite not having tss/tss officially registered.

Thanks,

Emily

Comment 4 Phil Knirsch 2008-08-07 16:09:02 UTC
I have just added the following uid/gid pair to Fedora and will be using the same assignment in RHEL-5:

tss             59      59      -                       /sbin/nologin   trousers

Thanks,

Read ya, Phil

Comment 6 IBM Bug Proxy 2008-09-10 20:01:01 UTC
Red Hat, Do you expect this to make RHEL 5.3?

Comment 7 John Jarvis 2009-01-30 17:43:51 UTC
Deferring to 5.5 based on discussions with Emily.  The gid and uid have been assigned and next the changes in Fedora need to go into Fedora. Once in Fedora, IBM will put in a request for RHEL.

Comment 9 IBM Bug Proxy 2009-02-06 15:14:51 UTC
This bugzilla has Keywords FutureFeature or HardwareEnablement and thus does not meet the
release criteria for FasTrack. This FasTrack request has been denied.
This bugzilla must be addressed in a minor release.

Comment 12 John Jarvis 2009-02-12 16:24:24 UTC
This enhancement request was evaluated by the full Red Hat Enterprise Linux team
for inclusion in a Red Hat Enterprise Linux minor release.   As a result of this
evaluation, Red Hat has tentatively approved inclusion of this feature in the
next Red Hat Enterprise Linux Update minor release.   While it is a goal to
include this enhancement in the next minor release of Red Hat Enterprise Linux,
the enhancement is not yet committed for inclusion in the next minor release
pending the next phase of actual code integration and successful Red Hat and
partner testing.

Comment 20 errata-xmlrpc 2009-05-14 07:41:00 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-0484.html

Comment 21 IBM Bug Proxy 2009-06-15 13:11:10 UTC
------- Comment From sglass.com 2009-06-15 09:03 EDT-------
Since this went out in a Errata already, moving to Accepted state