Description of problem: tog-pegasus has static useradd scripts Version-Release number of selected component (if applicable): tog-pegasus-2.14.1-64.el9 How reproducible: 100% Steps to Reproduce: 1.review %pre 2. 3. Actual results: %pre libs if [ $1 -eq 1 ]; then # first install: create the 'pegasus' user and group: /usr/sbin/groupadd -g %{pegasus_gid} -f -r pegasus >/dev/null 2>&1 || :; /usr/sbin/useradd -u %{pegasus_uid} -r -N -M -g pegasus -s /sbin/nologin -d /var/lib/Pegasus \ -c "tog-pegasus OpenPegasus WBEM/CIM services" pegasus >/dev/null 2>&1 || :; fi :; Expected results: use of system-sysusers Additional info: https://www.freedesktop.org/software/systemd/man/systemd-sysusers.html https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format
Hello, The guideline ([1]) doesn't prefer either of methods. It states, that "Any package can use dynamic allocation; it is especially appropriate for packages that use separate identities only for privilege separation and don’t create any files owned by that group/user account." tog-pegasus creates files owned by that group/user account. Is there any problem with static user and group creation? What would be the benefit of creating them dynamically? [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/
I'm mostly looking for greater consistency across various distributions. Suse is trying to standardize around this method. Clear Linux is similarly focused in this way. I'm hopeful to eventually make an `/etc/` reset possible. But first I need to be sure of user creation. If you wanted to do this in Fedora and wait for RHEL10 that would be fine with me.
(In reply to Pat Riehecky from comment #3) > I'm mostly looking for greater consistency across various distributions. > Suse is trying to standardize around this method. Clear Linux is similarly > focused in this way. I'm hopeful to eventually make an `/etc/` reset > possible. But first I need to be sure of user creation. > > If you wanted to do this in Fedora and wait for RHEL10 that would be fine > with me. I see, thanks! Yes, I prefer to do such a change in Fedora first. I'm changing the Product and Version field appropriately.
Fixed.