Re: Creating a user/group for a package

[The Fungi <fungi@yuggoth.org>]

On Sun, Jan 30, 2011 at 12:30:08AM +0000, David Given wrote:
[...]
> at uninstall time neither delete their group, timidity never
> deletes its user at uninstall time at all, and while ssh does
> delete its user, won't this cause problems if orphaned files are
> left with that uid?
[...]

This has been discussed to death in years past, but it's generally
considered more dangerous to delete accounts in package management
than to leave them behind. Not only might the admin have made use of
that account in other ways since installation but, as you point out,
deleting users or groups risks granting files to new users later if
left orphaned and there's not a really sane way to guarantee finding
those during package removal.
-- 
{ IRL(Jeremy_Stanley); WWW(http://fungi.yuggoth.org/); PGP(43495829);
WHOIS(STANL3-ARIN); SMTP(fungi@yuggoth.org); FINGER(fungi@yuggoth.org);
MUD(kinrui@katarsis.mudpy.org:6669); IRC(fungi@irc.yuggoth.org#ccl);
ICQ(114362511); YAHOO(crawlingchaoslabs); AIM(dreadazathoth); }