From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.15) Gecko/20080702 Fedora/2.0.0.15-1.fc8 Firefox/2.0.0.15 Description of problem: The utility should do some basic checking if the input strings contain special characters like ':', ',' etc. Version-Release number of selected component (if applicable): shadow-utils-4.0.18.1-22.fc8 How reproducible: Always Steps to Reproduce: # useradd tu1 # useradd tu2 # groupadd tegr # grep tegr /etc/group tegr:x:503: # grep tegr /etc/gshadow tegr:!:: # groupmems -a "tu1:tu2" -g tegr # echo $? 0 # grep tegr /etc/group tegr:x:503:tu1:tu2 # grep tegr /etc/gshadow tegr:!:: # groupmems -d tu2 -g tegr Member to remove could not be found # echo $? 6 # grep tegr /etc/group tegr:x:503:tu1:tu2 # grep tegr /etc/gshadow tegr:!:: # groupmems -d tu1 -g tegr # echo $? 0 # grep tegr /etc/group tegr:x:503:tu1 # grep tegr /etc/gshadow tegr:!:: Actual Results: groupmems accepts string with ':' as a username Expected Results: groupmems rejects string with ':' as a username Additional info:
fixed in 4.1.2-8
# groupmems -a "tu1:tu2" -g tegr groupmems: user 'tu1:tu2' does not exist # rpm -q shadow-utils shadow-utils-4.1.4.2-3.el6.i686 # rpm -q redhat-release redhat-release-6-6.0.0.21.el6.i686