Bug 652287
| Summary: | RHEVM User and Group ID reservation request | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Doron Fediuck <dfediuck> |
| Component: | setup | Assignee: | Ondrej Vasik <ovasik> |
| Status: | CLOSED ERRATA | QA Contact: | qe-baseos-daemons |
| Severity: | high | Docs Contact: | |
| Priority: | low | ||
| Version: | 6.0 | CC: | azelinka, fnadge, iheim |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | setup-2.8.14-11.el6 | Doc Type: | Bug Fix |
| Doc Text: |
The vdsm-reg package creates a user ID (UID) pair and group ID (GID) pair, both with the name "rhevm" and number "109". This user and group are used as a virtualization agent for Red Hat Enterprise Virtualization Manager. Previously, this UID/GID pair were not reserved during setup and other packages or administrators could accidentally assign those values to other users and groups. The setup package now reserves these UID and GID names and numbers. Accidental clashes with other users and groups are therefore avoided.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-05-19 11:54:35 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Doron Fediuck
2010-11-11 14:53:38 UTC
If you really need it, home directory in /home/rhevm is possible, however /var/<something> is in bigger use in the case of system accounts. As the other virt-related accounts are on 107:107 and 108:108 , I think the best would be to reserve 109:109 for rhevm. Could you please add which package should own/create this account? (In reply to comment #2) > If you really need it, home directory in /home/rhevm is possible, however > /var/<something> is in bigger use in the case of system accounts. You are correct, but rhevm will follow the vdsm user (36), and therefore I need a similar home. > As the other virt-related accounts are on 107:107 and 108:108 , I think the > best would be to reserve 109:109 for rhevm. Very well- you're the master :) > > Could you please add which package should own/create this account? vdsm-reg Thanks again! Ok, will reserve 109:109 in Fedora Rawhide in next build... Reserved in Fedora Rawhide - setup-2.28-1.fc15 ... (In reply to comment #5) > Reserved in Fedora Rawhide - setup-2.28-1.fc15 ... Thanks! What about RHEL ? It needs 3 acks for commit into RHEL-6 trees ... qa_ack is missing ... but feel free to use that uidgid pair. At least in RHEL-6 - in RHEL-5 I can't guarantee it (as the threshold for uidgid reservation in RHEL-5 and older is only 100 - and I don't have free uidgid pairs there). Please be so kind and add a few key words to the technical note of this bugzilla entry using the following structure: Cause: Consequence: Fix: Result: For details, see: https://bugzilla.redhat.com/page.cgi?id=fields.html#cf_release_notes Thanks
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
New Contents:
Cause
What actions or circumstances induced the feature request.
Consequence
What action was inhibited by the feature’s absence.
Change
What was done to implement the feature.
Note: backported from upstream is not an explanation.
Result
What now happens when the actions or circumstances above occur.
Note: this is not the same as the feature request was fulfilled.
These are already present in errata description text ... but ok, adding to technotes field.
Technical note updated. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
Diffed Contents:
@@ -1,10 +1 @@
-Cause
+This updated setup package reserves the new "rhevm" user ID and group ID, and the userid (UID) and groupid (GID) numbers (109:109), which should prevent accidental usage of that UID/GID pair by other packages and administrators. The "rhevm" user and group IDs are created by vdsm-reg package and used as virtualization agent for RHEV-M.- What actions or circumstances induced the feature request.
-Consequence
- What action was inhibited by the feature’s absence.
-Change
- What was done to implement the feature.
- Note: backported from upstream is not an explanation.
-Result
- What now happens when the actions or circumstances above occur.
- Note: this is not the same as the feature request was fulfilled.
Technical note updated. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
Diffed Contents:
@@ -1 +1 @@
-This updated setup package reserves the new "rhevm" user ID and group ID, and the userid (UID) and groupid (GID) numbers (109:109), which should prevent accidental usage of that UID/GID pair by other packages and administrators. The "rhevm" user and group IDs are created by vdsm-reg package and used as virtualization agent for RHEV-M.+The vdsm-reg package creates a user ID (UID) pair and group ID (GID) pair, both with the name "rhevm" and number "109". This user and group are used as a virtualization agent for Red Hat Enterprise Virtualization Manager. Previously, this UID/GID pair were not reserved during setup and other packages or administrators could accidentally assign those values to other users and groups. The setup package now reserves these UID and GID names and numbers. Accidental clashes with other users and groups are therefore avoided.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2011-0524.html |