Bug 717112 - Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (authconfig)
Summary: Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: authconfig
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1kAccounts
TreeView+ depends on / blocked
 
Reported: 2011-06-28 04:10 UTC by Miloslav Trmač
Modified: 2013-05-10 08:25 UTC (History)
3 users (show)

Fixed In Version: authconfig-6.1.15-1.fc16
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-07-22 11:35:38 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Miloslav Trmač 2011-06-28 04:10:51 UTC
Description of problem:
authinfo.py (and authconfig.8) categorize UIDs as system/user using a hard-coded value 500.  Please use UID_MIN from /etc/login.defs for this; we plan to change the boundary.

See attachment 510191 [details] for the proper way to parse /etc/login.defs.

Please let me know if you want me to prepare a complete patch.

Version-Release number of selected component (if applicable):
authconfig-6.1.14-2.fc16

Comment 1 Tomas Mraz 2011-06-28 06:25:24 UTC
No need to prepare a complete patch.

Comment 2 Kostas Georgiou 2011-07-21 10:31:00 UTC
Shouldn't authconfig use SYS_UID_{MIN,MAX} instead of UID_MIN?
Values below UID_MIN can still be user accounts...

Comment 3 Miloslav Trmač 2011-07-21 11:09:15 UTC
(In reply to comment #2)
> Shouldn't authconfig use SYS_UID_{MIN,MAX} instead of UID_MIN?
> Values below UID_MIN can still be user accounts...

Similarly, values outside of SYS_* can be system accounts.  In practice, SYS_UID_MAX defaults to (UID_MIN-1), so UID_MIN is the variable more likely to be present in login.defs - and checking UID_MIN is already a de facto standard.


Note You need to log in before you can comment on or make changes to this bug.