From mboxrd@z Thu Jan 1 00:00:00 1970 From: Vincent Legoll Subject: bug#24275: Misnamed directory in GuixSD Date: Mon, 22 Aug 2016 10:47:51 +0200 Message-ID: References: <20160820201100.GA22429@jocasta.intra> <20160821231410.GA4548@jasmine> <87bn0lciy1.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55269) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bbktr-0008E6-Ba for bug-guix@gnu.org; Mon, 22 Aug 2016 04:48:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bbktm-0006Z5-Dv for bug-guix@gnu.org; Mon, 22 Aug 2016 04:48:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:38759) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bbktm-0006Z0-9s for bug-guix@gnu.org; Mon, 22 Aug 2016 04:48:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1bbktl-0000Gf-Vo for bug-guix@gnu.org; Mon, 22 Aug 2016 04:48:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87bn0lciy1.fsf@gmail.com> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Alex Kost Cc: 24275@debbugs.gnu.org, John Darrington Hello, > IIUC it happens because the home directory is created only when a user > is added, and is not changed when the user is modified. See (gnu build > activation) module: > > - 'add-user' runs "useradd" with "-d" option to create home dir Maybe the nobody user should be special cased, not to run useradd with -d, the non existent directory, should really not exist for nobody. This is a (very small ?) security enhancement, I think... If this is the way to go, I can have a shot at it... > - 'modify-user' runs "usermod" without "-d" (and without "--move-home") > > So the home of nobody was not changed for us to '/nonexistent' when the > nobody user was changed. > > As for me, I wouldn't like to have this directory, and I think it > shouldn't be created (if it is not really needed for nobody user). Ditto. -- Vincent Legoll