Skip to main content ↑ ↓
Topic solved
This topic has been marked as solved and requires no further attention.
Topic: [ BUG] opensysuser does not create group with m (Read 612 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

[ BUG] opensysuser does not create group with m

Hi all,

With opensysusers 0.6 if I try to add a user to a nonexistent group using the 'm' type i got an error
because the opensysusers does not create the group by itself, so adding a user to a nonexistent
group obviously fails.
However the manpage for 'm' states that
"If the user or group do not exist yet, they will be implicitly created. "

This bug has been reported at Debian, see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986015

Thanks,
Lorenzo

Sidenote: it seems that the registrations to your gitea site are disabled: what is the expected way to report a
bug and contribute to a project?

[ BUG ] opensysusers: dangerous use of eval on GECOS field

Reply #1 –
Hi all,

Opensysusers 0.6 uses eval on every field of files in sysusers.d: this can have
unintended consequences as some field, like GECOS, can contain shell meta-characters
that are not supposed to be executed.
An example where running opensysusers results in removal of root
files has been reported in Debian, see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992058

Thanks,
Lorenzo

Re: [ BUG] opensysuser does not create group with m

Reply #2 –
Please don't create multiple topics for same report.

Re: [ BUG] opensysuser does not create group with m

Reply #3 –
Artix does not use opensysusers and it has not been maintained for a long time. You can compile complete standalone binaries (no other systemd dependency) for that utility from the systemd source tree which is what is currently used.

Re: [ BUG] opensysuser does not create group with m

Reply #4 –
Hi,
Quote
Please don't create multiple topics for same report.
sorry, it was not my intention to spam the forum


Quote
Artix does not use opensysusers and it has not been maintained for a long time.

ah, so if I want to keep opensysusers in Debian I need to fix those issues by myself..
ok, thanks for the info

Lorenzo