Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 79216 - mysql, ldap and snort users are created with shell /dev/null instead of /bin/false
Summary: mysql, ldap and snort users are created with shell /dev/null instead of /bin...
Status: VERIFIED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-01-23 08:08 UTC by Sascha Nitsch
Modified: 2005-01-25 07:18 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sascha Nitsch 2005-01-23 08:08:14 UTC
the following ebuilds create a mysql user with /dev/null as the login shell:
dev-db/mysql/mysql-4.0.23-r1.ebuild
dev-db/mysql/mysql-4.1.8-r1.ebuild
dev-db/mysql/mysql-4.0.22-r2.ebuild
dev-db/mysql/mysql-4.0.23-r2.ebuild
dev-db/mysql/mysql-4.0.22.ebuild
dev-db/mysql/mysql-4.0.22-r1.ebuild
dev-db/mysql/mysql-4.0.23.ebuild
dev-db/mysql/mysql-4.1.7.ebuild
dev-db/mysql/mysql-4.1.8.ebuild

the following ebuilds create a ldap user with /dev/null as the login shell:
net-nds/openldap/openldap-2.1.27-r1.ebuild
net-nds/openldap/openldap-2.1.26.ebuild
net-nds/openldap/openldap-2.1.30-r1.ebuild
net-nds/openldap/openldap-2.1.27.ebuild
net-nds/openldap/openldap-2.1.30-r2.ebuild
net-nds/openldap/openldap-2.1.30-r3.ebuild
net-nds/openldap/openldap-2.1.30.ebuild
net-nds/openldap/openldap-2.2.14.ebuild
net-nds/openldap/openldap-2.1.30-r4.ebuild
net-nds/openldap/openldap-2.2.19.ebuild

the following ebuilds create a snort user with /dev/null as the login shell:
net-analyzer/snort/snort-2.0.6.ebuild
net-analyzer/snort/snort-2.3.0_rc2.ebuild
net-analyzer/snort/snort-2.1.3.ebuild
net-analyzer/snort/snort-2.2.0.ebuild
net-analyzer/snort_inline/snort_inline-2.1.0a-r2.ebuild
net-analyzer/snort_inline/snort_inline-2.1.1.ebuild

Reproducible: Always
Steps to Reproduce:
1. delete mysql/ldap/snort user from /etc/passwd and /etc/shadow
2. ebuild /usr/portage/<one of the listed ebuilds> preinst
3. check /etc/passwd

Actual Results:  
users have /dev/null as login shell

Expected Results:  
it should use /bin/false as login shell

replacing the /dev/null with /bin/false in the enewuser line in the ebuilds is
enough.
Please dont answer to this like "it doesn't matter if you use /dev/null or
/bin/false". The default for no login is using /bin/false. portage does this in
its enewuser function, too.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-01-23 15:40:36 UTC
mysql and openldap fixed.
Comment 2 Daniel Black (RETIRED) gentoo-dev 2005-01-25 04:11:17 UTC
fixed.
Comment 3 Sascha Nitsch 2005-01-25 07:18:46 UTC
checked, new ebuilds are patched correctly.