Bug 2095479 - [RFE] tpm2-tss use systemd-sysusers
Summary: [RFE] tpm2-tss use systemd-sysusers
Keywords:
Status: VERIFIED
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: tpm2-tss
Version: CentOS Stream
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Štěpán Horáček
QA Contact: Vilém Maršík
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-06-09 18:37 UTC by Pat Riehecky
Modified: 2023-07-26 14:07 UTC (History)
5 users (show)

Fixed In Version: tpm2-tss-3.2.2-1.el9
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-124907 0 None None None 2022-06-09 18:42:26 UTC

Description Pat Riehecky 2022-06-09 18:37:12 UTC
Description of problem:
tpm2-tss has static useradd scripts

Version-Release number of selected component (if applicable):
tpm2-tss-3.0.3-7.el9

How reproducible:
100%

Steps to Reproduce:
1.review %pre
2.
3.

Actual results:
%pre
getent group tss >/dev/null || groupadd -f -g 59 -r tss
if ! getent passwd tss >/dev/null ; then
    if ! getent passwd 59 >/dev/null ; then
      useradd -r -u 59 -g tss -d /dev/null -s /sbin/nologin -c "Account used for TPM access" tss
    else
      useradd -r -g tss -d /dev/null -s /sbin/nologin -c "Account used for TPM access" tss
    fi
fi

Expected results:
use of system-sysusers 

Additional info:
https://www.freedesktop.org/software/systemd/man/systemd-sysusers.html
https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format

Comment 2 Jerry Snitselaar 2022-06-09 22:28:22 UTC
Example of a change to a package in Fedora to make use of this:

https://src.fedoraproject.org/fork/zbyszek/rpms/munge/c/dd0498ebb79605ee6a18100db30b07fddfaf31e4

Comment 4 Vilém Maršík 2023-07-26 07:18:14 UTC
Looks fixed in tpm2-tss.spec of tpm2-tss-3.2.2-1.el9.src.rpm:
Source1:       tpm2-tss-systemd-sysusers.conf
%sysusers_create_compat %{SOURCE1}

As it looks already merged to master, the bug should probably already be in ON_QA.

Comment 8 Vilém Maršík 2023-07-26 14:07:39 UTC
Package tpm2-tss-3.2.2-2.el9.src.rpm with version from erratum shows the same results as in Comment #4, setting verified.


Note You need to log in before you can comment on or make changes to this bug.