Bug 79216 - mysql, ldap and snort users are created with shell /dev/null instead of /bin/false
Bug#: 79216 Product:  Gentoo Linux Version: unspecified Platform: All
OS/Version: All Status: CLOSED Severity: normal Priority: P2
Resolution: FIXED Assigned To: netmon@gentoo.org Reported By: gentoobugs@linuxhowtos.org
Component: Ebuilds
URL: 
Summary: mysql, ldap and snort users are created with shell /dev/null instead of /bin/false
Keywords:  
Status Whiteboard: 
Opened: 2005-01-23 08:08 0000
Description:   Opened: 2005-01-23 08:08 0000
the following ebuilds create a mysql user with /dev/null as the login shell:
dev-db/mysql/mysql-4.0.23-r1.ebuild
dev-db/mysql/mysql-4.1.8-r1.ebuild
dev-db/mysql/mysql-4.0.22-r2.ebuild
dev-db/mysql/mysql-4.0.23-r2.ebuild
dev-db/mysql/mysql-4.0.22.ebuild
dev-db/mysql/mysql-4.0.22-r1.ebuild
dev-db/mysql/mysql-4.0.23.ebuild
dev-db/mysql/mysql-4.1.7.ebuild
dev-db/mysql/mysql-4.1.8.ebuild

the following ebuilds create a ldap user with /dev/null as the login shell:
net-nds/openldap/openldap-2.1.27-r1.ebuild
net-nds/openldap/openldap-2.1.26.ebuild
net-nds/openldap/openldap-2.1.30-r1.ebuild
net-nds/openldap/openldap-2.1.27.ebuild
net-nds/openldap/openldap-2.1.30-r2.ebuild
net-nds/openldap/openldap-2.1.30-r3.ebuild
net-nds/openldap/openldap-2.1.30.ebuild
net-nds/openldap/openldap-2.2.14.ebuild
net-nds/openldap/openldap-2.1.30-r4.ebuild
net-nds/openldap/openldap-2.2.19.ebuild

the following ebuilds create a snort user with /dev/null as the login shell:
net-analyzer/snort/snort-2.0.6.ebuild
net-analyzer/snort/snort-2.3.0_rc2.ebuild
net-analyzer/snort/snort-2.1.3.ebuild
net-analyzer/snort/snort-2.2.0.ebuild
net-analyzer/snort_inline/snort_inline-2.1.0a-r2.ebuild
net-analyzer/snort_inline/snort_inline-2.1.1.ebuild

Reproducible: Always
Steps to Reproduce:
1. delete mysql/ldap/snort user from /etc/passwd and /etc/shadow
2. ebuild /usr/portage/<one of the listed ebuilds> preinst
3. check /etc/passwd

Actual Results:  
users have /dev/null as login shell

Expected Results:  
it should use /bin/false as login shell

replacing the /dev/null with /bin/false in the enewuser line in the ebuilds is
enough.
Please dont answer to this like "it doesn't matter if you use /dev/null or
/bin/false". The default for no login is using /bin/false. portage does this in
its enewuser function, too.

------- Comment #1 From Robin Johnson 2005-01-23 15:40:36 0000 -------
mysql and openldap fixed.

------- Comment #2 From Daniel Black 2005-01-25 04:11:17 0000 -------
fixed.

------- Comment #3 From Sascha Nitsch 2005-01-25 07:18:46 0000 -------
checked, new ebuilds are patched correctly.