[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#575309: user-setup: Should stop adding first user to device access groups



Package: user-setup
Version: 1.28
Tags:    patch

In squeeze, the desktop uses consolekit and friends to grant access to
devices for the user in front on the screen.  This scale a lot better
when there is a lot of users in LDAP or NIS that need to get access to
the local devices on their own machine, but not the local devices on
other peoples machine.

The code in user-setup-apply to add the first user to all the groups
in passwd/user-default-groups should no longer be needed.  I believe
it should be dropped for Squeeze, or at least the default groups used
should be trimmed down to nothing.

Here is a patch to remove the code.

Index: user-setup-apply
===================================================================
--- user-setup-apply    (revision 58013)
+++ user-setup-apply    (working copy)
@@ -125,13 +125,6 @@
                $log $chroot $ROOT chown "$USER:$USER" "/home/$USER" >/dev/null || true
        fi

-       if [ -n "$USER" ]; then
-               db_get passwd/user-default-groups
-               for group in $RET; do
-                       $log $chroot $ROOT adduser "$USER" $group >/dev/null 2>&1 || true
-               done
-       fi
-
        db_get passwd/root-login
        if [ "$RET" = false ] && [ -n "$USER" ]; then
                # Ensure sudo is installed, and set up the user to be able
Index: debian/user-setup-udeb.templates
===================================================================
--- debian/user-setup-udeb.templates    (revision 58013)
+++ debian/user-setup-udeb.templates    (working copy)
@@ -16,12 +16,6 @@
 Type: string
 Description: for internal use only

-# Allow preseeding the groups to which the first created user is added
-Template: passwd/user-default-groups
-Type: string
-Default: audio cdrom dialout floppy video plugdev netdev powerdev scanner
-Description: for internal use only
-
 Template: passwd/root-login
 Type: boolean
 Default: true

Happy hacking,
-- 
Petter Reinholdtsen



Reply to: