Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 79216

Summary: mysql, ldap and snort users are created with shell /dev/null instead of /bin/false
Product: Gentoo Linux Reporter: Sascha Nitsch <gentoobugs>
Component: New packagesAssignee: Gentoo Netmon project <netmon>
Status: VERIFIED FIXED    
Severity: normal    
Priority: High    
Version: unspecified   
Hardware: All   
OS: All   
Whiteboard:
Package list:
Runtime testing required: ---

Description Sascha Nitsch 2005-01-23 08:08:14 UTC 
the following ebuilds create a mysql user with /dev/null as the login shell:
dev-db/mysql/mysql-4.0.23-r1.ebuild
dev-db/mysql/mysql-4.1.8-r1.ebuild
dev-db/mysql/mysql-4.0.22-r2.ebuild
dev-db/mysql/mysql-4.0.23-r2.ebuild
dev-db/mysql/mysql-4.0.22.ebuild
dev-db/mysql/mysql-4.0.22-r1.ebuild
dev-db/mysql/mysql-4.0.23.ebuild
dev-db/mysql/mysql-4.1.7.ebuild
dev-db/mysql/mysql-4.1.8.ebuild

the following ebuilds create a ldap user with /dev/null as the login shell:
net-nds/openldap/openldap-2.1.27-r1.ebuild
net-nds/openldap/openldap-2.1.26.ebuild
net-nds/openldap/openldap-2.1.30-r1.ebuild
net-nds/openldap/openldap-2.1.27.ebuild
net-nds/openldap/openldap-2.1.30-r2.ebuild
net-nds/openldap/openldap-2.1.30-r3.ebuild
net-nds/openldap/openldap-2.1.30.ebuild
net-nds/openldap/openldap-2.2.14.ebuild
net-nds/openldap/openldap-2.1.30-r4.ebuild
net-nds/openldap/openldap-2.2.19.ebuild

the following ebuilds create a snort user with /dev/null as the login shell:
net-analyzer/snort/snort-2.0.6.ebuild
net-analyzer/snort/snort-2.3.0_rc2.ebuild
net-analyzer/snort/snort-2.1.3.ebuild
net-analyzer/snort/snort-2.2.0.ebuild
net-analyzer/snort_inline/snort_inline-2.1.0a-r2.ebuild
net-analyzer/snort_inline/snort_inline-2.1.1.ebuild

Reproducible: Always
Steps to Reproduce:
1. delete mysql/ldap/snort user from /etc/passwd and /etc/shadow
2. ebuild /usr/portage/<one of the listed ebuilds> preinst
3. check /etc/passwd

Actual Results:  
users have /dev/null as login shell

Expected Results:  
it should use /bin/false as login shell

replacing the /dev/null with /bin/false in the enewuser line in the ebuilds is
enough.
Please dont answer to this like "it doesn't matter if you use /dev/null or
/bin/false". The default for no login is using /bin/false. portage does this in
its enewuser function, too.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-01-23 15:40:36 UTC 
mysql and openldap fixed.
Comment 2 Daniel Black (RETIRED) gentoo-dev 2005-01-25 04:11:17 UTC 
fixed.
Comment 3 Sascha Nitsch 2005-01-25 07:18:46 UTC 
checked, new ebuilds are patched correctly.