On Thu, Mar 10, 2022 at 09:37:49PM +0100, Marc Haber wrote: > >- leading digits sometimes causes programs to parse a 'username' as an > > 'user id' instead; you can see some of this here: > > https://github.com/systemd/systemd/issues/6237 > > I know I've seen more instances of this over the years. > > > >- leading dash may cause the username to be treated as command line > > options in some programs. I've lost references to this happening. > > Should those two restrictions apply for both system and user accounts? > Should they be overrideable? I think both restrictions should apply to both system and user accounts, and allowing an admin to override this is perfectly fine; we can't know the full set of requirements at every site. Thanks
Attachment:
signature.asc
Description: PGP signature