Re: Bits from the release team: the plans for etch
* sean finney (seanius@debian.org) [051026 14:20]:
> On Wed, Oct 26, 2005 at 02:15:41PM +0200, Gabor Gombas wrote:
> > If a package's postrm removes the user, and the next package's postinst
> > just calls "adduser", then the admin have no control over the reusing.
> >
> > If you want to allow automatic user/group removal, then adduser should
> > be extended to remember every UID/GID that was ever used by a system
> > user, and never reuse them again even if they have since been removed
> > from /etc/passwd and/or /etc/group.
>
> i don't think removing and reusing users is a good idea in practice.
> what harm would there be in simply leaving the user account on the
> system permenantly, with maybe locking the account and setting the
> shell to /bin/false?
Yep, that's probably best practice.
Cheers,
Andi
Reply to: