Re: Package-created usernames
fw@deneb.enyo.de (Florian Weimer) writes:
> * Bdale Garbee:
>
>> The second is whether it's acceptable for a Debian package to
>> *require* a specific username.
>
> There are a couple of setuid binaries which might have problems
> switching to a more flexible scheme. I fear such a requirement might
> actually reduce overall security.
Right.
After digesting the replies here and some off-list discussions, I
now agree that while it is desireable for packages to be flexible about
usernames to support the kinds of situations I described, requiring all
Debian packages to be flexible in this way is not a reasonable objective.
Bdale
Reply to: