80 Commits

Author SHA256 Message Date
abe1330f17 Accepting request 1303598 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1303598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=34
2025-09-11 12:37:19 +00:00
d97562cd92 Accepting request 1301256 from home:jengelh:branches:Base:System
- Remove old and now implicit %defattr lines
- Use noun phrase for descriptions
- Reduce calls to mkdir

OBS-URL: https://build.opensuse.org/request/show/1301256
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=69
2025-09-10 09:25:49 +00:00
2c95eae138 Accepting request 1300997 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1300997
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=33
2025-08-27 19:34:10 +00:00
da6bb037c1 Accepting request 1300992 from home:kukuk:branches:Base:System
- Use fully locked user accounts
- Remove daemon as second group

OBS-URL: https://build.opensuse.org/request/show/1300992
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=68
2025-08-22 15:35:08 +00:00
515843ff2f Accepting request 1252358 from Base:System
- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)

OBS-URL: https://build.opensuse.org/request/show/1252358
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=32
2025-03-13 14:05:49 +00:00
038bf51124 - system-group-hardware: add group clock for systemd 258
(udev: set clock group for PTP and RTC devices)

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=67
2025-03-12 09:36:16 +00:00
895a939696 Accepting request 1219547 from Base:System
OBS-URL: https://build.opensuse.org/request/show/1219547
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=31
2024-10-31 15:08:30 +00:00
ece7611b21 Accepting request 1219546 from home:kukuk:cleanup
- system-user-nobody: remove shell for user nobody, all packages
  should be meanwhile adjusted, no other distribution has a shell
  for this user.

OBS-URL: https://build.opensuse.org/request/show/1219546
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=66
2024-10-30 12:18:53 +00:00
033b41089c Accepting request 1104655 from Base:System
- system-group-hardware: remove group lp, we have system-user-lp (forwarded request 1104654 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/1104655
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=30
2023-09-11 19:19:44 +00:00
982b453d04 Accepting request 1104654 from home:kukuk:branches:Base:System
- system-group-hardware: remove group lp, we have system-user-lp

OBS-URL: https://build.opensuse.org/request/show/1104654
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=65
2023-08-18 09:50:54 +00:00
d2f1441f6e Accepting request 932250 from Base:System
OBS-URL: https://build.opensuse.org/request/show/932250
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=29
2021-11-20 01:38:41 +00:00
2bd0bada7c Accepting request 931929 from home:michals
group name for such devices (bsc#1190572).
- Add third argument to sysusers_generate_pre calls to allow
  contain syntax errors (bsc#1190401).

OBS-URL: https://build.opensuse.org/request/show/931929
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=64
2021-11-18 12:54:55 +00:00
a45d86041e Accepting request 917598 from Base:System
- Set shell for nobody in sysusers.d config (forwarded request 917597 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/917598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=28
2021-09-10 21:40:36 +00:00
55abc71d8f Accepting request 917597 from home:kukuk:tiu
- Set shell for nobody in sysusers.d config

OBS-URL: https://build.opensuse.org/request/show/917597
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=63
2021-09-08 14:31:51 +00:00
66dc755d0c Accepting request 898638 from Base:System
OBS-URL: https://build.opensuse.org/request/show/898638
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=27
2021-07-01 05:05:24 +00:00
81c49ffa46 Accepting request 898470 from home:fbui:branches:Base:System
- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices.

OBS-URL: https://build.opensuse.org/request/show/898470
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=62
2021-06-09 06:19:37 +00:00
3d78f2317b Accepting request 898114 from home:kukuk:container
- Add third argument to sysusers_generate_pre calls to allow 
  admin overrides with systemd-sysusers

OBS-URL: https://build.opensuse.org/request/show/898114
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=61
2021-06-07 13:15:54 +00:00
Richard Brown
23c4b24d23 Accepting request 874356 from Base:System
OBS-URL: https://build.opensuse.org/request/show/874356
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=26
2021-03-02 13:41:36 +00:00
81d2811432 Accepting request 871417 from home:rmax:branches:Base:System
- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.

OBS-URL: https://build.opensuse.org/request/show/871417
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=60
2021-02-22 15:00:54 +00:00
4269cface0 Accepting request 871210 from Base:System
Try again

OBS-URL: https://build.opensuse.org/request/show/871210
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=25
2021-02-17 17:08:51 +00:00
c46c96babf Accepting request 868678 from Base:System
Add system-user-ntp

OBS-URL: https://build.opensuse.org/request/show/868678
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=24
2021-02-04 19:21:27 +00:00
c2e12601c0 https://bugzilla.opensuse.org/show_bug.cgi?id=1181328
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=22
2021-01-25 09:30:14 +00:00
873d47deb9 Accepting request 863310 from Base:System
- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf (forwarded request 863309 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/863310
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=21
2021-01-22 20:48:58 +00:00
5e3792fdb7 Accepting request 863309 from home:kukuk:etc
- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf

OBS-URL: https://build.opensuse.org/request/show/863309
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=57
2021-01-15 11:00:30 +00:00
2b8f584a04 Accepting request 861758 from home:mnhauke
- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory

OBS-URL: https://build.opensuse.org/request/show/861758
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=56
2021-01-08 16:06:23 +00:00
c827544baa Accepting request 859003 from Base:System
- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory

The vscan user is currently used by the amavisd-new and clamav packages, but there are other packages that might benefit from running daemons as non-privileged user (looking at you, spamassassin) (forwarded request 858972 from adkorte)

OBS-URL: https://build.opensuse.org/request/show/859003
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=20
2020-12-30 16:10:58 +00:00
0856e11055 Accepting request 858972 from home:adkorte:branches:Base:System
- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory

The vscan user is currently used by the amavisd-new and clamav packages, but there are other packages that might benefit from running daemons as non-privileged user (looking at you, spamassassin)

OBS-URL: https://build.opensuse.org/request/show/858972
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=54
2020-12-28 12:04:29 +00:00
7f9ee802ca Accepting request 853579 from Base:System
OBS-URL: https://build.opensuse.org/request/show/853579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=19
2020-12-16 09:58:46 +00:00
3b5914ea0c Accepting request 853079 from home:fcrozat:branches:Base:System
- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).

OBS-URL: https://build.opensuse.org/request/show/853079
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=52
2020-12-07 12:24:57 +00:00
bb06f43d53 Accepting request 848960 from Base:System
OBS-URL: https://build.opensuse.org/request/show/848960
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=18
2020-11-23 14:33:39 +00:00
2728fbb04e Accepting request 848381 from home:jfehlig:branches:Base:System
Another update. I forgot to add the qemu user to the kvm group.

- Add qemu user to kvm group

OBS-URL: https://build.opensuse.org/request/show/848381
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=50
2020-11-16 19:40:14 +00:00
85d39d4225 Accepting request 848225 from home:jfehlig:branches:Base:System
Changes necessary for jsc#SLE-11629. Please let me know if anything
needs to be done to also make these changes appear in SLE15 SP3.
Thanks!

- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf

OBS-URL: https://build.opensuse.org/request/show/848225
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=49
2020-11-13 08:14:06 +00:00
ee4beed0e9 Accepting request 828855 from Base:System
- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group (forwarded request 828854 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/828855
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=17
2020-08-28 19:16:23 +00:00
f9998209a4 Accepting request 828854 from home:kukuk:container
- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group

OBS-URL: https://build.opensuse.org/request/show/828854
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=47
2020-08-24 07:37:43 +00:00
82f601783e Accepting request 788125 from Base:System
- Use test -x instead of -f (forwarded request 788124 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/788125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=16
2020-03-30 20:50:57 +00:00
0018524f4b Accepting request 788124 from home:kukuk:container
- Use test -x instead of -f

OBS-URL: https://build.opensuse.org/request/show/788124
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=45
2020-03-25 10:11:34 +00:00
c308842641 Accepting request 787138 from home:kukuk:container
- Call usermod only if installed

OBS-URL: https://build.opensuse.org/request/show/787138
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=44
2020-03-21 13:51:38 +00:00
177cd59c33 Accepting request 775206 from Base:System
- Align /var/lib/tss permissions with trousers (boo#1162360). (forwarded request 775182 from michals)

OBS-URL: https://build.opensuse.org/request/show/775206
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=15
2020-02-24 14:49:45 +00:00
e93d284dbd Accepting request 775182 from home:michals
- Align /var/lib/tss permissions with trousers (boo#1162360).

OBS-URL: https://build.opensuse.org/request/show/775182
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=42
2020-02-18 13:40:01 +00:00
c4f6a23229 Accepting request 769061 from Base:System
OBS-URL: https://build.opensuse.org/request/show/769061
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=14
2020-02-09 20:01:15 +00:00
e9e1187b88 Accepting request 769046 from home:michals
- Add tss user for TPM tools (boo#1162360).

OBS-URL: https://build.opensuse.org/request/show/769046
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=40
2020-01-31 13:32:43 +00:00
c3ae1241ba Accepting request 723093 from Base:System
OBS-URL: https://build.opensuse.org/request/show/723093
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=13
2019-08-15 10:27:04 +00:00
6599de7d30 Accepting request 722993 from home:michals
- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.

OBS-URL: https://build.opensuse.org/request/show/722993
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=38
2019-08-13 14:17:35 +00:00
bca07169c1 Accepting request 720027 from home:rmax:branches:Base:System
- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].

OBS-URL: https://build.opensuse.org/request/show/720027
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=37
2019-08-01 11:10:56 +00:00
226267a192 Accepting request 679449 from Base:System
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/679449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=12
2019-03-05 11:15:54 +00:00
f76d530785 OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=35 2019-02-03 18:25:11 +00:00
a765e24ce5 Accepting request 590364 from Base:System
OBS-URL: https://build.opensuse.org/request/show/590364
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=11
2018-03-30 09:55:00 +00:00
ffc80d4be6 Accepting request 589739 from home:fbui:branches:Base:System
- Add "render" group in system-group-hardware (bsc#1085847)

OBS-URL: https://build.opensuse.org/request/show/589739
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=33
2018-03-22 15:40:36 +00:00
57c4ed2bc0 Accepting request 546397 from Base:System
- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.

OBS-URL: https://build.opensuse.org/request/show/546397
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=10
2017-12-06 07:47:24 +00:00
9e54ff2707 - Change home directory of user man to /var/lib/empty. Home
directories below /var/cache are by definition insecure and a
  bad idea.

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=31
2017-11-29 10:25:58 +00:00