79216 2005-01-23 08:08 0000 mysql, ldap and snort users are created with shell /dev/null instead of /bin/false 2005-01-25 07:18:46 0000 1 1 1 Unclassified Gentoo Linux Ebuilds unspecified All All CLOSED FIXED P2 normal --- 1 gentoobugs@linuxhowtos.org netmon@gentoo.org gentoobugs@linuxhowtos.org 2005-01-23 08:08:14 0000 the following ebuilds create a mysql user with /dev/null as the login shell: dev-db/mysql/mysql-4.0.23-r1.ebuild dev-db/mysql/mysql-4.1.8-r1.ebuild dev-db/mysql/mysql-4.0.22-r2.ebuild dev-db/mysql/mysql-4.0.23-r2.ebuild dev-db/mysql/mysql-4.0.22.ebuild dev-db/mysql/mysql-4.0.22-r1.ebuild dev-db/mysql/mysql-4.0.23.ebuild dev-db/mysql/mysql-4.1.7.ebuild dev-db/mysql/mysql-4.1.8.ebuild the following ebuilds create a ldap user with /dev/null as the login shell: net-nds/openldap/openldap-2.1.27-r1.ebuild net-nds/openldap/openldap-2.1.26.ebuild net-nds/openldap/openldap-2.1.30-r1.ebuild net-nds/openldap/openldap-2.1.27.ebuild net-nds/openldap/openldap-2.1.30-r2.ebuild net-nds/openldap/openldap-2.1.30-r3.ebuild net-nds/openldap/openldap-2.1.30.ebuild net-nds/openldap/openldap-2.2.14.ebuild net-nds/openldap/openldap-2.1.30-r4.ebuild net-nds/openldap/openldap-2.2.19.ebuild the following ebuilds create a snort user with /dev/null as the login shell: net-analyzer/snort/snort-2.0.6.ebuild net-analyzer/snort/snort-2.3.0_rc2.ebuild net-analyzer/snort/snort-2.1.3.ebuild net-analyzer/snort/snort-2.2.0.ebuild net-analyzer/snort_inline/snort_inline-2.1.0a-r2.ebuild net-analyzer/snort_inline/snort_inline-2.1.1.ebuild Reproducible: Always Steps to Reproduce: 1. delete mysql/ldap/snort user from /etc/passwd and /etc/shadow 2. ebuild /usr/portage/<one of the listed ebuilds> preinst 3. check /etc/passwd Actual Results: users have /dev/null as login shell Expected Results: it should use /bin/false as login shell replacing the /dev/null with /bin/false in the enewuser line in the ebuilds is enough. Please dont answer to this like "it doesn't matter if you use /dev/null or /bin/false". The default for no login is using /bin/false. portage does this in its enewuser function, too. robbat2@gentoo.org 2005-01-23 15:40:36 0000 mysql and openldap fixed. dragonheart@gentoo.org 2005-01-25 04:11:17 0000 fixed. gentoobugs@linuxhowtos.org 2005-01-25 07:18:46 0000 checked, new ebuilds are patched correctly.