pool/system-users
SHA256
12
0
Fork 2
Code Issues Pull Requests Activity

Compare commits

merge into: pool:devel
Branches Tags
pool:factory pool:slfo-1.2 pool:slfo-main pool:devel
...
pull from: pool:factory
Branches Tags
pool:factory pool:slfo-1.2 pool:slfo-main pool:devel

79 Commits
devel ... factory

Author SHA256 Message Date
Ana Guerrero
9e97675dd6 Accepting request 1303598 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/1303598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=34
 2025-09-11 12:37:19 +00:00
Dirk Mueller
f0c01efe97 - Remove old and now implicit %defattr lines 
- Use noun phrase for descriptions
- Reduce calls to mkdir

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=69
 2025-09-10 09:25:49 +00:00
Ana Guerrero
d21b1a92fd Accepting request 1300997 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/1300997
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=33
 2025-08-27 19:34:10 +00:00
Thorsten Kukuk
7402f46d48 - Use fully locked user accounts 
- Remove daemon as second group

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=68
 2025-08-22 15:35:08 +00:00
Ana Guerrero
5b1dcf98f8 Accepting request 1252358 from Base:System 
- system-group-hardware: add group clock for systemd 258
  (udev: set clock group for PTP and RTC devices)

OBS-URL: https://build.opensuse.org/request/show/1252358
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=32
 2025-03-13 14:05:49 +00:00
Dominique Leuenberger
6c30dc589e Accepting request 1219547 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/1219547
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=31
 2024-10-31 15:08:30 +00:00
Thorsten Kukuk
a29e1bbb09 - system-user-nobody: remove shell for user nobody, all packages 
should be meanwhile adjusted, no other distribution has a shell
  for this user.

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=66
 2024-10-30 12:18:53 +00:00
Ana Guerrero
257435732c Accepting request 1104655 from Base:System 
- system-group-hardware: remove group lp, we have system-user-lp (forwarded request 1104654 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/1104655
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=30
 2023-09-11 19:19:44 +00:00
Thorsten Kukuk
e765a82da8 Accepting request 1104654 from home:kukuk:branches:Base:System 
- system-group-hardware: remove group lp, we have system-user-lp

OBS-URL: https://build.opensuse.org/request/show/1104654
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=65
 2023-08-18 09:50:54 +00:00
Dominique Leuenberger
c8a5d4c2c3 Accepting request 932250 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/932250
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=29
 2021-11-20 01:38:41 +00:00
Thorsten Kukuk
4634ce8b7b Accepting request 931929 from home:michals 
group name for such devices (bsc#1190572).
- Add third argument to sysusers_generate_pre calls to allow
  contain syntax errors (bsc#1190401).

OBS-URL: https://build.opensuse.org/request/show/931929
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=64
 2021-11-18 12:54:55 +00:00
Dominique Leuenberger
1659bb605c Accepting request 917598 from Base:System 
- Set shell for nobody in sysusers.d config (forwarded request 917597 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/917598
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=28
 2021-09-10 21:40:36 +00:00
Thorsten Kukuk
59e0fd5c32 Accepting request 917597 from home:kukuk:tiu 
- Set shell for nobody in sysusers.d config

OBS-URL: https://build.opensuse.org/request/show/917597
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=63
 2021-09-08 14:31:51 +00:00
Dominique Leuenberger
f65af60bd0 Accepting request 898638 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/898638
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=27
 2021-07-01 05:05:24 +00:00
Thorsten Kukuk
e08d9969be Accepting request 898470 from home:fbui:branches:Base:System 
- Add default hardware group for 'sgx' enclave access
  Since udev v248, a default rule for /dev/sgx_enclave is provided to
  give rw access to the new group hopefully making 'sgx' the standard
  group name for such devices.

OBS-URL: https://build.opensuse.org/request/show/898470
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=62
 2021-06-09 06:19:37 +00:00
Thorsten Kukuk
5d2241cf4b Accepting request 898114 from home:kukuk:container 
- Add third argument to sysusers_generate_pre calls to allow 
  admin overrides with systemd-sysusers

OBS-URL: https://build.opensuse.org/request/show/898114
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=61
 2021-06-07 13:15:54 +00:00
Richard Brown
d616ae8715 Accepting request 874356 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/874356
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=26
 2021-03-02 13:41:36 +00:00
Thorsten Kukuk
ebde9e16d5 Accepting request 871417 from home:rmax:branches:Base:System 
- Revert /var/lib/ntp to the ownership and permissions it had in
  the ntp package. It should be owned by root and not be writable
  by the ntp user, because it is the base of ntpd's chroot
  envoronment and the ntp user is not supposed to log in anyway.

OBS-URL: https://build.opensuse.org/request/show/871417
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=60
 2021-02-22 15:00:54 +00:00
Dominique Leuenberger
64a8100b7f Accepting request 871210 from Base:System 
Try again

OBS-URL: https://build.opensuse.org/request/show/871210
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=25
 2021-02-17 17:08:51 +00:00
Dominique Leuenberger
7b0445fed0 Accepting request 868678 from Base:System 
Add system-user-ntp

OBS-URL: https://build.opensuse.org/request/show/868678
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=24
 2021-02-04 19:21:27 +00:00
Dominique Leuenberger
8dd62cbe5d https://bugzilla.opensuse.org/show_bug.cgi?id=1181328 
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=22
 2021-01-25 09:30:14 +00:00
Dominique Leuenberger
3e2258c0d7 Accepting request 863310 from Base:System 
- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf (forwarded request 863309 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/863310
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=21
 2021-01-22 20:48:58 +00:00
Thorsten Kukuk
54d42d4e15 Accepting request 863309 from home:kukuk:etc 
- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors
- remove duplicate group entry:
  - system-user-tftp.conf
  - system-user-uuidd.conf
  - system-user-uucp.conf
  - system-user-uucp.conf
  - system-user-ftp.conf
  - system-user-games.conf
  - system-user-news.conf

OBS-URL: https://build.opensuse.org/request/show/863309
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=57
 2021-01-15 11:00:30 +00:00
Thorsten Kukuk
d202e8b28a Accepting request 861758 from home:mnhauke 
- Add system-user-ntp subpackage with ntp user and group and
  /var/lib/ntp as home directory

OBS-URL: https://build.opensuse.org/request/show/861758
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=56
 2021-01-08 16:06:23 +00:00
Dominique Leuenberger
0ff0f8f44c Accepting request 859003 from Base:System 
- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory

The vscan user is currently used by the amavisd-new and clamav packages, but there are other packages that might benefit from running daemons as non-privileged user (looking at you, spamassassin) (forwarded request 858972 from adkorte)

OBS-URL: https://build.opensuse.org/request/show/859003
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=20
 2020-12-30 16:10:58 +00:00
Thorsten Kukuk
89777a50d7 Accepting request 858972 from home:adkorte:branches:Base:System 
- Add system-user-vscan subpackage with vscan user and group and
  /var/spool/amavis as home directory

The vscan user is currently used by the amavisd-new and clamav packages, but there are other packages that might benefit from running daemons as non-privileged user (looking at you, spamassassin)

OBS-URL: https://build.opensuse.org/request/show/858972
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=54
 2020-12-28 12:04:29 +00:00
Dominique Leuenberger
a0baccd19a Accepting request 853579 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/853579
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=19
 2020-12-16 09:58:46 +00:00
Thorsten Kukuk
f7b5ce5d12 Accepting request 853079 from home:fcrozat:branches:Base:System 
- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).

OBS-URL: https://build.opensuse.org/request/show/853079
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=52
 2020-12-07 12:24:57 +00:00
Dominique Leuenberger
e0c12bc0cf Accepting request 848960 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/848960
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=18
 2020-11-23 14:33:39 +00:00
Dirk Mueller
1ff678792f Accepting request 848381 from home:jfehlig:branches:Base:System 
Another update. I forgot to add the qemu user to the kvm group.

- Add qemu user to kvm group

OBS-URL: https://build.opensuse.org/request/show/848381
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=50
 2020-11-16 19:40:14 +00:00
Thorsten Kukuk
0365362bb0 Accepting request 848225 from home:jfehlig:branches:Base:System 
Changes necessary for jsc#SLE-11629. Please let me know if anything
needs to be done to also make these changes appear in SLE15 SP3.
Thanks!

- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf

OBS-URL: https://build.opensuse.org/request/show/848225
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=49
 2020-11-13 08:14:06 +00:00
Dominique Leuenberger
5dc1a55a5e Accepting request 828855 from Base:System 
- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group (forwarded request 828854 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/828855
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=17
 2020-08-28 19:16:23 +00:00
Thorsten Kukuk
2bd0a87e4b Accepting request 828854 from home:kukuk:container 
- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group

OBS-URL: https://build.opensuse.org/request/show/828854
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=47
 2020-08-24 07:37:43 +00:00
Dominique Leuenberger
9282019b03 Accepting request 788125 from Base:System 
- Use test -x instead of -f (forwarded request 788124 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/788125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=16
 2020-03-30 20:50:57 +00:00
Thorsten Kukuk
d80072ee8a Accepting request 788124 from home:kukuk:container 
- Use test -x instead of -f

OBS-URL: https://build.opensuse.org/request/show/788124
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=45
 2020-03-25 10:11:34 +00:00
Thorsten Kukuk
eb205050c2 Accepting request 787138 from home:kukuk:container 
- Call usermod only if installed

OBS-URL: https://build.opensuse.org/request/show/787138
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=44
 2020-03-21 13:51:38 +00:00
Dominique Leuenberger
6772182896 Accepting request 775206 from Base:System 
- Align /var/lib/tss permissions with trousers (boo#1162360). (forwarded request 775182 from michals)

OBS-URL: https://build.opensuse.org/request/show/775206
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=15
 2020-02-24 14:49:45 +00:00
Thorsten Kukuk
b0f7a84a97 Accepting request 775182 from home:michals 
- Align /var/lib/tss permissions with trousers (boo#1162360).

OBS-URL: https://build.opensuse.org/request/show/775182
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=42
 2020-02-18 13:40:01 +00:00
Dominique Leuenberger
32ecc18672 Accepting request 769061 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/769061
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=14
 2020-02-09 20:01:15 +00:00
Thorsten Kukuk
199342982e Accepting request 769046 from home:michals 
- Add tss user for TPM tools (boo#1162360).

OBS-URL: https://build.opensuse.org/request/show/769046
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=40
 2020-01-31 13:32:43 +00:00
Dominique Leuenberger
a3cd2c3cc9 Accepting request 723093 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/723093
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=13
 2019-08-15 10:27:04 +00:00
Thorsten Kukuk
fc73ebc987 Accepting request 722993 from home:michals 
- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.

OBS-URL: https://build.opensuse.org/request/show/722993
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=38
 2019-08-13 14:17:35 +00:00
Thorsten Kukuk
fe11d6805f Accepting request 720027 from home:rmax:branches:Base:System 
- Add system-user-tftp subpackage with tftp user and group and
  /srv/tftpboot as home directory [bsc#1143454].

OBS-URL: https://build.opensuse.org/request/show/720027
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=37
 2019-08-01 11:10:56 +00:00
Dominique Leuenberger
2ea9274f25 Accepting request 679449 from Base:System 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/679449
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=12
 2019-03-05 11:15:54 +00:00
Dirk Mueller
bc0987f633 OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=35 2019-02-03 18:25:11 +00:00
Dominique Leuenberger
be043916fe Accepting request 590364 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/590364
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=11
 2018-03-30 09:55:00 +00:00
Thorsten Kukuk
3e87c79958 Accepting request 589739 from home:fbui:branches:Base:System 
- Add "render" group in system-group-hardware (bsc#1085847)

OBS-URL: https://build.opensuse.org/request/show/589739
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=33
 2018-03-22 15:40:36 +00:00
Dominique Leuenberger
06d96593d6 Accepting request 546397 from Base:System 
- Change home directory of user man to /var/lib/empty. Home
  directories below /var/cache are by definition insecure and a
  bad idea.

OBS-URL: https://build.opensuse.org/request/show/546397
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=10
 2017-12-06 07:47:24 +00:00
Thorsten Kukuk
87b693b40b - Change home directory of user man to /var/lib/empty. Home 
directories below /var/cache are by definition insecure and a
  bad idea.

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=31
 2017-11-29 10:25:58 +00:00
Dominique Leuenberger
3e3e1511d0 Accepting request 526091 from Base:System 
- uuidd does not need group daemon, Copy&Paste error.

- udev needs groups kvm and lp: [bsc#1058703]
  - Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware

- Add system-user-uuidd.conf (boo#1057937#c3).

OBS-URL: https://build.opensuse.org/request/show/526091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=9
 2017-09-18 17:54:22 +00:00
Thorsten Kukuk
e1d5b824b9 - uuidd does not need group daemon, Copy&Paste error. 
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=29
 2017-09-14 12:40:51 +00:00
Thorsten Kukuk
73b7bf1c9b - udev needs groups kvm and lp: [bsc#1058703] 
- Add group kvm to system-group-hardware
  - Move group lp from system-user-lp to system-group-hardware

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=28
 2017-09-14 12:38:55 +00:00
Thorsten Kukuk
3de1a0fc5b Accepting request 523677 from home:sbrabec:branches:util-linux-1057937 
- Add system-user-uuidd.conf (boo#1057937#c3).

OBS-URL: https://build.opensuse.org/request/show/523677
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=27
 2017-09-13 09:43:46 +00:00
Dominique Leuenberger
86b9cb9032 Accepting request 517842 from Base:System 
- user nobody: move usermod to %post, else it will be executed
  before the user is created. (forwarded request 517841 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/517842
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=8
 2017-08-29 09:35:48 +00:00
Thorsten Kukuk
c66194d537 Accepting request 517841 from home:kukuk:sysusers 
- user nobody: move usermod to %post, else it will be executed
  before the user is created.

OBS-URL: https://build.opensuse.org/request/show/517841
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=25
 2017-08-21 07:07:45 +00:00
Dominique Leuenberger
a5a4a70f14 Accepting request 509140 from Base:System 
1

OBS-URL: https://build.opensuse.org/request/show/509140
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=7
 2017-07-21 20:37:04 +00:00
Dirk Mueller
81aac1eae8 Accepting request 509121 from home:dimstar:Factory 
- Drop pkgconfig(systemd) BuildRequires: we no longer depend on
  systemd-sysusers, but converted to shadow toolset.

OBS-URL: https://build.opensuse.org/request/show/509121
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=23
 2017-07-10 10:54:18 +00:00
Dominique Leuenberger
1be9596ae6 Accepting request 505024 from Base:System 
1

OBS-URL: https://build.opensuse.org/request/show/505024
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=6
 2017-06-23 07:13:59 +00:00
Thorsten Kukuk
2a7db287be Accepting request 505023 from home:kukuk:sysusers 
- Move group trusted into system-user-root package [bsc#1044014]
- Move system-user-root into own package
- Fix syntax of groups in system-user-root.conf

OBS-URL: https://build.opensuse.org/request/show/505023
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=21
 2017-06-20 10:45:19 +00:00
Thorsten Kukuk
73b672ea93 Accepting request 502534 from home:kukuk:sysusers 
- Add utmp to system-group-hardware.conf like systemd has
- Create new system-user-root sub-package creating passwd, group
  and shadow files with root user.

OBS-URL: https://build.opensuse.org/request/show/502534
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=20
 2017-06-09 10:02:06 +00:00
Thorsten Kukuk
94ecb5f73c Accepting request 501658 from home:kukuk:sysusers 
OBS-URL: https://build.opensuse.org/request/show/501658
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=19
 2017-06-07 10:19:07 +00:00
Thorsten Kukuk
8002a1e16a Accepting request 501651 from home:kukuk:sysusers 
- BuildIgnore group(lock) and group(daemon) for ourselves, needed
  for bootstrap.

OBS-URL: https://build.opensuse.org/request/show/501651
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=18
 2017-06-07 10:15:01 +00:00
Thorsten Kukuk
69e47750b5 Accepting request 501437 from home:dimstar:Factory 
- BuildRequire pkgconfig(systemd) instead of systemd: this allows
  OBS to pick systemd-mini, which is still good enough. And
  ultimately it helps us break a build cycle
  (system-users - libssh2_org - curl - systemd - system-users).

OBS-URL: https://build.opensuse.org/request/show/501437
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=17
 2017-06-07 09:57:43 +00:00
Dominique Leuenberger
533b889926 Accepting request 492622 from Base:System 
1

OBS-URL: https://build.opensuse.org/request/show/492622
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=5
 2017-05-10 18:32:40 +00:00
Thorsten Kukuk
d7b06a20f7 Accepting request 492620 from home:kukuk:sysusers 
- /bin/bash is needed as shell for user nobody

OBS-URL: https://build.opensuse.org/request/show/492620
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=15
 2017-05-03 11:08:34 +00:00
Thorsten Kukuk
db5fa1eafe Accepting request 492513 from home:sbrabec:branches:hardware 
- Add upsd for UPS daemon packages.
This is exactly equal to rq#489349, just the home directory was changed to /var/lib/empty.

OBS-URL: https://build.opensuse.org/request/show/492513
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=14
 2017-05-03 07:26:23 +00:00
Yuchen Lin
21e0ccd10f Accepting request 485070 from Base:System 
- Prerequire group lock for uucp

- Allow user uucp to do locking

OBS-URL: https://build.opensuse.org/request/show/485070
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=4
 2017-04-12 15:09:17 +00:00
Thorsten Kukuk
39c4be5109 - Prerequire group lock for uucp 
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=12
 2017-04-01 11:25:52 +00:00
Dr. Werner Fink
4e0bce7a91 . 
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=11
 2017-04-01 08:46:39 +00:00
Dominique Leuenberger
007a3931a0 Accepting request 480797 from Base:System 
- Fix group ownership of /var/lib/wwwrun (forwarded request 480796 from kukuk)

OBS-URL: https://build.opensuse.org/request/show/480797
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=3
 2017-03-17 14:07:43 +00:00
Thorsten Kukuk
e1f1ee534c Accepting request 480796 from home:kukuk:sysusers 
- Fix group ownership of /var/lib/wwwrun

OBS-URL: https://build.opensuse.org/request/show/480796
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=9
 2017-03-17 09:37:11 +00:00
Thorsten Kukuk
dbda3bc769 Accepting request 480636 from home:kukuk:sysusers 
- Add group sys to system-group-obsolete
- Add systemusers lp and nobody

OBS-URL: https://build.opensuse.org/request/show/480636
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=8
 2017-03-16 14:25:57 +00:00
Thorsten Kukuk
208027cd7e Accepting request 479795 from home:kukuk:sysusers 
- Add systemusers wwwrun, mail and ftp

OBS-URL: https://build.opensuse.org/request/show/479795
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=7
 2017-03-15 19:52:50 +00:00
Dominique Leuenberger
b1d31ba6c9 Accepting request 478630 from Base:System 
- Add hardware access groups: kmem, lock, tty, audio, cdrom,
  dialout, disk, input, tape, video
- Add group wheel

OBS-URL: https://build.opensuse.org/request/show/478630
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=2
 2017-03-11 14:19:41 +00:00
Thorsten Kukuk
dff4632ab2 - Add hardware access groups: kmem, lock, tty, audio, cdrom, 
dialout, disk, input, tape, video
- Add group wheel

OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=5
 2017-03-11 08:35:23 +00:00
Dominique Leuenberger
f60c0e187f Accepting request 459514 from Base:System 
OBS-URL: https://build.opensuse.org/request/show/459514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/system-users?expand=0&rev=1
 2017-03-02 18:28:11 +00:00
Thorsten Kukuk
733cdba213 - Remove /var/spool/uucp directories... 
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=3
 2017-02-21 14:14:12 +00:00
Thorsten Kukuk
9c150bfc0d - Change license to MIT 
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=2
 2017-02-20 08:56:24 +00:00
Marcus Meissner
612b56b22d Accepting request 457440 from home:kukuk:sysusers 
RPM to create the system users

OBS-URL: https://build.opensuse.org/request/show/457440
OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=1
 2017-02-15 14:49:13 +00:00
20 changed files with 50 additions and 70 deletions
Expand all files Collapse all files

4
system-user-bin.conf
View File

@@ -1,4 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g bin 1 u! bin 1 bin /bin
m daemon bin
u bin 1 bin /bin

3
system-user-daemon.conf
View File

@@ -1,3 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g daemon 2 u! daemon 2 Daemon /sbin
u daemon 2 Daemon /sbin

2
system-user-ftp.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u ftp - "FTP Account" /srv/ftp u! ftp - "FTP Account" /srv/ftp

2
system-user-games.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u games - "Games account" /var/games u! games - "Games account" /var/games

2
system-user-lp.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u lp - "Printing daemon" /var/spool/lpd u! lp - "Printing daemon" /var/spool/lpd

2
system-user-mail.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u mail - "Mailer daemon" /var/spool/clientmqueue u! mail - "Mailer daemon" /var/spool/clientmqueue

2
system-user-man.conf
View File

@@ -1,3 +1,3 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g man 62 g man 62
u man 13 "Manual pages viewer" /var/lib/empty u! man 13 "Manual pages viewer" /var/lib/empty

2
system-user-news.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u news - "News system" /etc/news u! news - "News system" /etc/news

3
system-user-nobody.conf
View File

@@ -1,4 +1,3 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g nogroup 65533 g nogroup 65533
g nobody 65534 u! nobody 65534 "nobody" /var/lib/nobody -
u nobody 65534 "nobody" /var/lib/nobody -

2
system-user-ntp.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u ntp - "NTP account" /var/lib/ntp u! ntp - "NTP account" /var/lib/ntp

3
system-user-qemu.conf
View File

@@ -1,4 +1,3 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g qemu 107 u! qemu 107 "qemu user"
u qemu 107 "qemu user"
m qemu kvm m qemu kvm

2
system-user-tftp.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u tftp - "TFTP Account" /srv/tftpboot u! tftp - "TFTP Account" /srv/tftpboot

2
system-user-tss.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u tss 98 "TSS daemon" /var/lib/tpm u! tss 98 "TSS daemon" /var/lib/tpm

3
system-user-upsd.conf
View File

@@ -1,3 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u upsd - "UPS daemon" /var/lib/empty u! upsd - "UPS daemon" /var/lib/empty
m upsd daemon

2
system-user-uucp.conf
View File

@@ -1,3 +1,3 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u uucp - "Unix-to-Unix CoPy system" /etc/uucp u! uucp - "Unix-to-Unix CoPy system" /etc/uucp
m uucp lock m uucp lock

2
system-user-uuidd.conf
View File

@@ -1,2 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
u uuidd - "User for uuidd" /var/run/uuidd u! uuidd - "User for uuidd" /var/run/uuidd

3
system-user-vscan.conf
View File

@@ -1,3 +1,2 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g vscan 65 - - u! vscan 65 "Vscan account" /var/spool/amavis
u vscan 65 "Vscan account" /var/spool/amavis

2
system-user-wwwrun.conf
View File

@@ -1,4 +1,4 @@
# Type Name ID GECOS [HOME] # Type Name ID GECOS [HOME]
g www - g www -
u wwwrun - "WWW daemon apache" /var/lib/wwwrun u! wwwrun - "WWW daemon apache" /var/lib/wwwrun
m wwwrun www m wwwrun www

13
system-users.changes
View File

@@ -1,3 +1,16 @@
-------------------------------------------------------------------
Mon Aug 25 09:01:05 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
- Remove old and now implicit %defattr lines
- Use noun phrase for descriptions
- Reduce calls to mkdir
-------------------------------------------------------------------
Fri Aug 22 14:27:27 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>
- Use fully locked user accounts
- Remove daemon as second group
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Mar 12 09:31:26 UTC 2025 - Thorsten Kukuk <kukuk@suse.com> Wed Mar 12 09:31:26 UTC 2025 - Thorsten Kukuk <kukuk@suse.com>

64
system-users.spec
View File

@@ -1,7 +1,7 @@
# #
# spec file for package system-users # spec file for package system-users
# #
# Copyright (c) 2025 SUSE LLC # Copyright (c) 2025 SUSE LLC and contributors
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@@ -17,9 +17,9 @@
Name: system-users Name: system-users
Version: 20170617 Version: 20250822
Release: 0 Release: 0
Summary: Provide system accounts Summary: Provider for system accounts
License: MIT License: MIT
Group: System/Fhs Group: System/Fhs
Source1: system-user-uucp.conf Source1: system-user-uucp.conf
@@ -54,9 +54,7 @@ This package provides various system users and their directories
%package -n system-user-bin %package -n system-user-bin
Summary: System user and group 'bin' Summary: System user and group 'bin'
#!BuildIgnore: user(daemon)
Group: System/Fhs Group: System/Fhs
Requires(pre): user(daemon)
%{sysusers_requires} %{sysusers_requires}
%description -n system-user-bin %description -n system-user-bin
@@ -178,9 +176,7 @@ This package provides the system account and group 'nobody'.
%package -n system-user-upsd %package -n system-user-upsd
Summary: System user upsd Summary: System user upsd
#!BuildIgnore: group(daemon)
Group: System/Fhs Group: System/Fhs
Requires(pre): group(daemon)
%{sysusers_requires} %{sysusers_requires}
%description -n system-user-upsd %description -n system-user-upsd
@@ -252,7 +248,7 @@ Group: System/Fhs
This package provides the system user and group 'ntp'. This package provides the system user and group 'ntp'.
%prep %prep
%setup -q -c -T %autosetup -c
%build %build
%sysusers_generate_pre %{SOURCE1} uucp system-user-uucp.conf %sysusers_generate_pre %{SOURCE1} uucp system-user-uucp.conf
@@ -280,20 +276,21 @@ This package provides the system user and group 'ntp'.
%sysusers_generate_pre %{SOURCE25} ntp system-user-ntp.conf %sysusers_generate_pre %{SOURCE25} ntp system-user-ntp.conf
%install %install
mkdir -p %{buildroot}%{_sysusersdir} mkdir -pv \
mkdir -p %{buildroot}%{_sysconfdir}/uucp %{buildroot}%{_sysusersdir} \
mkdir -p %{buildroot}%{_sysconfdir}/news %{buildroot}%{_sysconfdir}/uucp \
mkdir -p %{buildroot}%{_localstatedir}/games %{buildroot}%{_sysconfdir}/news \
mkdir -p %{buildroot}%{_localstatedir}/lib/ntp %{buildroot}%{_localstatedir}/games \
mkdir -p %{buildroot}%{_localstatedir}/lib/wwwrun %{buildroot}%{_localstatedir}/lib/ntp \
mkdir -p %{buildroot}%{_localstatedir}/spool/amavis %{buildroot}%{_localstatedir}/lib/wwwrun \
mkdir -p %{buildroot}%{_localstatedir}/spool/clientmqueue %{buildroot}%{_localstatedir}/spool/amavis \
mkdir -p %{buildroot}%{_localstatedir}/spool/lpd %{buildroot}%{_localstatedir}/spool/clientmqueue \
mkdir -p %{buildroot}%{_localstatedir}/run/uuidd %{buildroot}%{_localstatedir}/spool/lpd \
mkdir -p %{buildroot}/srv/ftp %{buildroot}%{_localstatedir}/run/uuidd \
mkdir -p %{buildroot}%{_localstatedir}/lib/nobody %{buildroot}/srv/ftp \
mkdir -p %{buildroot}/srv/tftpboot %{buildroot}%{_localstatedir}/lib/nobody \
mkdir -p %{buildroot}/var/lib/tpm %{buildroot}/srv/tftpboot \
%{buildroot}/var/lib/tpm
install -m 644 %{SOURCE1} %{buildroot}%{_sysusersdir}/system-user-uucp.conf install -m 644 %{SOURCE1} %{buildroot}%{_sysusersdir}/system-user-uucp.conf
install -m 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/system-user-games.conf install -m 644 %{SOURCE2} %{buildroot}%{_sysusersdir}/system-user-games.conf
install -m 644 %{SOURCE3} %{buildroot}%{_sysusersdir}/system-user-bin.conf install -m 644 %{SOURCE3} %{buildroot}%{_sysusersdir}/system-user-bin.conf
@@ -365,106 +362,83 @@ install -m 644 %{SOURCE25} %{buildroot}%{_sysusersdir}/system-user-ntp.conf
%pre -n system-user-ntp -f ntp.pre %pre -n system-user-ntp -f ntp.pre
%files -n system-user-uucp %files -n system-user-uucp
%defattr(-,root,root)
%dir %attr(0750,uucp,uucp) %{_sysconfdir}/uucp %dir %attr(0750,uucp,uucp) %{_sysconfdir}/uucp
%{_sysusersdir}/system-user-uucp.conf %{_sysusersdir}/system-user-uucp.conf
%files -n system-user-games %files -n system-user-games
%defattr(-,root,root)
%dir %attr(0755,root,root) %{_localstatedir}/games %dir %attr(0755,root,root) %{_localstatedir}/games
%{_sysusersdir}/system-user-games.conf %{_sysusersdir}/system-user-games.conf
%files -n system-user-bin %files -n system-user-bin
%defattr(-,root,root)
%{_sysusersdir}/system-user-bin.conf %{_sysusersdir}/system-user-bin.conf
%files -n system-user-daemon %files -n system-user-daemon
%defattr(-,root,root)
%{_sysusersdir}/system-user-daemon.conf %{_sysusersdir}/system-user-daemon.conf
%files -n system-user-man %files -n system-user-man
%defattr(-,root,root)
%{_sysusersdir}/system-user-man.conf %{_sysusersdir}/system-user-man.conf
%files -n system-user-news %files -n system-user-news
%defattr(-,root,root)
%dir %attr(0750,news,news) %{_sysconfdir}/news %dir %attr(0750,news,news) %{_sysconfdir}/news
%{_sysusersdir}/system-user-news.conf %{_sysusersdir}/system-user-news.conf
%files -n system-group-obsolete %files -n system-group-obsolete
%defattr(-,root,root)
%{_sysusersdir}/system-group-obsolete.conf %{_sysusersdir}/system-group-obsolete.conf
%files -n system-group-hardware %files -n system-group-hardware
%defattr(-,root,root)
%{_sysusersdir}/system-group-hardware.conf %{_sysusersdir}/system-group-hardware.conf
%files -n system-group-wheel %files -n system-group-wheel
%defattr(-,root,root)
%{_sysusersdir}/system-group-wheel.conf %{_sysusersdir}/system-group-wheel.conf
%files -n system-user-wwwrun %files -n system-user-wwwrun
%defattr(-,root,root)
%dir %attr(0755,wwwrun,root) %{_localstatedir}/lib/wwwrun %dir %attr(0755,wwwrun,root) %{_localstatedir}/lib/wwwrun
%{_sysusersdir}/system-user-wwwrun.conf %{_sysusersdir}/system-user-wwwrun.conf
%files -n system-user-mail %files -n system-user-mail
%defattr(-,root,root)
%dir %attr(0770,mail,mail) %{_localstatedir}/spool/clientmqueue %dir %attr(0770,mail,mail) %{_localstatedir}/spool/clientmqueue
%{_sysusersdir}/system-user-mail.conf %{_sysusersdir}/system-user-mail.conf
%files -n system-user-ftp %files -n system-user-ftp
%defattr(-,root,root)
%dir %attr(0755,root,root) /srv/ftp %dir %attr(0755,root,root) /srv/ftp
%{_sysusersdir}/system-user-ftp.conf %{_sysusersdir}/system-user-ftp.conf
%files -n system-user-lp %files -n system-user-lp
%defattr(-,root,root)
%dir %attr(0755,lp,lp) %{_localstatedir}/spool/lpd %dir %attr(0755,lp,lp) %{_localstatedir}/spool/lpd
%{_sysusersdir}/system-user-lp.conf %{_sysusersdir}/system-user-lp.conf
%files -n system-user-nobody %files -n system-user-nobody
%defattr(-,root,root)
%dir %attr(0755,nobody,root) %{_localstatedir}/lib/nobody %dir %attr(0755,nobody,root) %{_localstatedir}/lib/nobody
%{_sysusersdir}/system-user-nobody.conf %{_sysusersdir}/system-user-nobody.conf
%files -n system-user-upsd %files -n system-user-upsd
%defattr(-,root,root)
%{_sysusersdir}/system-user-upsd.conf %{_sysusersdir}/system-user-upsd.conf
%files -n system-user-uuidd %files -n system-user-uuidd
%defattr(-,root,root)
%{_sysusersdir}/system-user-uuidd.conf %{_sysusersdir}/system-user-uuidd.conf
%files -n system-user-tftp %files -n system-user-tftp
%defattr(-,root,root)
%dir %attr(0755,tftp,tftp) /srv/tftpboot %dir %attr(0755,tftp,tftp) /srv/tftpboot
%{_sysusersdir}/system-user-tftp.conf %{_sysusersdir}/system-user-tftp.conf
%files -n system-user-tss %files -n system-user-tss
%defattr(-,root,root)
%dir %attr(0750,tss,tss) /var/lib/tpm %dir %attr(0750,tss,tss) /var/lib/tpm
%{_sysusersdir}/system-user-tss.conf %{_sysusersdir}/system-user-tss.conf
%files -n system-group-kvm %files -n system-group-kvm
%defattr(-,root,root)
%{_sysusersdir}/system-group-kvm.conf %{_sysusersdir}/system-group-kvm.conf
%files -n system-user-qemu %files -n system-user-qemu
%defattr(-,root,root)
%{_sysusersdir}/system-user-qemu.conf %{_sysusersdir}/system-user-qemu.conf
%files -n system-group-libvirt %files -n system-group-libvirt
%defattr(-,root,root)
%{_sysusersdir}/system-group-libvirt.conf %{_sysusersdir}/system-group-libvirt.conf
%files -n system-user-vscan %files -n system-user-vscan
%defattr(-,root,root)
%dir %attr(0750,vscan,vscan) %{_localstatedir}/spool/amavis %dir %attr(0750,vscan,vscan) %{_localstatedir}/spool/amavis
%{_sysusersdir}/system-user-vscan.conf %{_sysusersdir}/system-user-vscan.conf
%files -n system-user-ntp %files -n system-user-ntp
%defattr(-,root,root)
%dir %attr(0755,root,root) %{_localstatedir}/lib/ntp %dir %attr(0755,root,root) %{_localstatedir}/lib/ntp
%{_sysusersdir}/system-user-ntp.conf %{_sysusersdir}/system-user-ntp.conf