[Bug 2126785] Review Request: usbrelay - USB-connected electrical relay control, based on hidapi

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=2126785



--- Comment #16 from Björn Persson <bjorn@xxxxxxxxxxxxxxxxxxxx> ---
(In reply to Darryl Bond from comment #14)
> At what point is the group created?

Dropping a file in _sysusersdir triggers a file trigger that creates user
accounts and groups as specified by the files in that directory. You can see it
with "rpm --query --filetriggers systemd". It's a post-transaction trigger so
it's executed after all the packages have been installed. That's too late for a
package that needs the group during installation, so usbrelay-mqtt needs to
create the group in %pre.

> Would it be normal practice to put a groupdel in the %postun of usbrelay?

As far as I know it's common practice to leave user accounts and groups behind
when packages are removed. If the group has access to any files that aren't
owned by the package, then the numeric group ID will still have that access
after the group name is removed. Next time a group is created the group ID will
be reused, and then the new group will inherit privileges from the deleted
group. For security it's better to avoid deleting the group.


-- 
You are receiving this mail because:
You are always notified about changes to this product and component
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2126785
_______________________________________________
package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite Conditions]     [KDE Users]

  Powered by Linux