Re: Seeking consensus for some changes in adduser
On Tue, Mar 08, 2022 at 05:49:04PM +0100, Marc Haber wrote:
>...
> (2)
> #774046 #520037
> Which special characters should we allow for account names?
>
> People demand being able to use a dot (which might break scripts using
> chown) and non-ASCII national characters in account names. The regex
> used to verify non-system accounts is configurable, so the policy can be
> locally relaxed at run-time.
>
> For system-accounts, I'd like to stick to ASCII letters, numbers,
> underscores.
>...
There is a DD with the login 93sam, and this is already outside of
what systemd accepts.[1]
Non-ASCII characters in account names sound like a lot of breakage
and CVEs to me.
> Greetings
> Marc
cu
Adrian
[1] https://github.com/systemd/systemd/issues/6237
Reply to: