Commit ccc056db authored by Przemysław Pawełczyk's avatar Przemysław Pawełczyk Committed by Natanael Copa
Browse files

Add lacking -S option (system) to adduser/addgroup in scripts.

Groups and users created by packages shouldn't use high ids by default
(unless explicitly requested), to distinguish them from groups and users
created by administrators for humans.

Following 41 files lacked -S next to addgroup:
- community/sword/sword.pre-install
- main/amavisd-new/amavisd-new.pre-install
- main/chrony/chrony.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dnsmasq/dnsmasq.pre-install
- main/freeradius/freeradius.pre-install
- main/gdnsd/gdnsd.pre-install
- main/haproxy/haproxy.pre-install
- main/haproxy/haproxy.pre-upgrade
- main/kamailio/kamailio.pre-install
- main/logcheck/logcheck.pre-install
- main/mlmmj/mlmmj.pre-install
- main/nrpe/nrpe.pre-install
- main/open-vm-tools/open-vm-tools.pre-install
- main/postgrey/postgrey.pre-install
- main/privoxy/privoxy.pre-install
- main/redis/redis.pre-install
- main/samba/winbind.pre-install
- main/sircbot/sircbot.pre-install
- main/smokeping/smokeping.pre-install
- main/squark/squark.post-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/vsftpd/vsftpd.pre-install
- main/zabbix/zabbix-agent.pre-install
- testing/3proxy/3proxy.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/elasticsearch/elasticsearch.pre-install
- testing/emby/emby.pre-install
- testing/gdnsd/gdnsd.pre-install
- testing/icinga2/icinga2.pre-install
- testing/lusca/lusca.pre-install
- testing/lusca/lusca.pre-upgrade
- testing/mongodb/mongodb.pre-install
- testing/openxcap/openxcap.pre-install
- testing/prosody/prosody.pre-install
- testing/rancid/rancid.pre-install
- testing/rutorrent/rutorrent.pre-install
- testing/zabbix/zabbix-agent.pre-install

Following 60 files lacked -S next to adduser:
- community/caddy/caddy.pre-install
- community/domoticz/domoticz.pre-install
- community/minetest/minetest-server.pre-install
- community/oscam/oscam.pre-install
- community/seafile/seafile-server.pre-install
- community/syncthing/syncthing.pre-install
- main/apache2/apache2.pre-install
- main/aports-build/aports-build.pre-install
- main/atheme-iris/atheme-iris.pre-install
- main/bind/bind.pre-install
- main/clamav/clamav-db.pre-install
- main/clamsmtp/clamsmtp.pre-install
- main/clamsmtp/clamsmtp.pre-upgrade
- main/coova-chilli/coova-chilli.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dhcp/dhcp.pre-install
- main/distcc/distcc.pre-install
- main/djbdns/dnscache.pre-install
- main/djbdns/tinydns.pre-install
- main/dovecot/dovecot.pre-install
- main/ez-ipupdate/ez-ipupdate.pre-install
- main/fetchmail/fetchmail.pre-install
- main/freeswitch/freeswitch.pre-install
- main/gitolite/gitolite.pre-install
- main/gnats/gnats.pre-install
- main/gross/gross.pre-install
- main/icecast/icecast.pre-install
- main/kamailio/kamailio.pre-install
- main/lighttpd/lighttpd.pre-install
- main/mariadb/mariadb.pre-install
- main/memcached/memcached.pre-install
- main/ngircd/ngircd.pre-install
- main/nrpe/nrpe.pre-install
- main/openntpd/openntpd.pre-install
- main/postgrey/postgrey.pre-install
- main/snort/snort.pre-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/transmission/transmission-daemon.pre-install
- main/ympd/ympd.pre-install
- main/znc/znc.pre-install
- testing/at/at.pre-install
- testing/buildbot-slave/buildbot-slave.pre-install
- testing/buildbot/buildbot.pre-install
- testing/clapf/clapf.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/dbmail/dbmail.pre-install
- testing/dspam/dspam.pre-install
- testing/ejabberd/ejabberd.pre-install
- testing/emby/emby.pre-install
- testing/mongodb/mongodb.pre-install
- testing/opensips/opensips.pre-install
- testing/pdns/pdns.pre-install
- testing/prosody/prosody.pre-install
- testing/qpage/qpage.pre-install
- testing/rrdbot/rrdbot.pre-install
- testing/wt/wt.pre-install
- unmaintained/ejabberd-git/ejabberd-git.pre-install
parent 2a573734
#!/bin/sh
adduser -h /var/lib/caddy -D -s /sbin/nologin caddy 2>/dev/null
adduser -S -h /var/lib/caddy -D -s /sbin/nologin caddy 2>/dev/null
adduser caddy www-data 2>/dev/null
exit 0
#!/bin/sh
adduser -h /var/lib/domoticz -D -s /sbin/nologin domoticz 2>/dev/null
adduser -S -h /var/lib/domoticz -D -s /sbin/nologin domoticz 2>/dev/null
exit 0
#!/bin/sh
addgroup icinga 2>/dev/null
addgroup icingacmd 2>/dev/null
addgroup -S icinga 2>/dev/null
addgroup -S icingacmd 2>/dev/null
adduser -S -G icinga -H -h /var/spool/icinga2 -s /sbin/nologin -D icinga 2>/dev/null
adduser icinga icingacmd 2>/dev/null 2>/dev/null
exit 0
#!/bin/sh
adduser -s /sbin/nologin -D -h /var/lib/minetest minetest games 2>/dev/null
adduser -S -s /sbin/nologin -D -h /var/lib/minetest minetest games 2>/dev/null
exit 0
#!/bin/sh
adduser -H -D -s /sbin/nologin oscam 2>/dev/null
adduser -S -H -D -s /sbin/nologin oscam 2>/dev/null
addgroup oscam usb 2>/dev/null
exit 0
......@@ -3,5 +3,5 @@
SEAFILE_HOME=/var/lib/seafile
addgroup -S -g 800 seafile 2>/dev/null
adduser -h $SEAFILE_HOME -s /bin/sh -G seafile -g seafile -u 800 -D seafile 2>/dev/null
adduser -S -h $SEAFILE_HOME -s /bin/sh -G seafile -g seafile -u 800 -D seafile 2>/dev/null
exit 0
#!/bin/sh
echo "Adding 'sword' group for installing SWORD modules systemwide"
addgroup sword 2>/dev/null >&2 || true
addgroup -S sword 2>/dev/null >&2 || true
#!/bin/sh
adduser -H -h /var/lib/syncthing -s /sbin/nologin -D syncthing 2>/dev/null
adduser -S -H -h /var/lib/syncthing -s /sbin/nologin -D syncthing 2>/dev/null
exit 0
#!/bin/sh
addgroup amavis 2>/dev/null
addgroup -S amavis 2>/dev/null
adduser -S -D -G amavis -h /var/amavis -s /sbin/nologin amavis 2>/dev/null
exit 0
#!/bin/sh
addgroup -S -g 82 www-data 2>/dev/null
adduser -H -h /var/www -s /sbin/nologin -D apache 2>/dev/null
adduser -S -H -h /var/www -s /sbin/nologin -D apache 2>/dev/null
addgroup apache www-data 2>/dev/null
exit 0
#!/bin/sh
adduser -D buildozer -s /bin/sh 2>/dev/null
adduser -S -D buildozer -s /bin/sh 2>/dev/null
exit 0
#!/bin/sh
adduser -H -h /usr/share/webapps/atheme-iris -g iris -D -s /sbin/nologin iris >/dev/null
adduser -S -H -h /usr/share/webapps/atheme-iris -g iris -D -s /sbin/nologin iris >/dev/null
exit 0
#!/bin/sh
addgroup -S named 2>/dev/null
adduser -h /etc/bind -s /sbin/nologin -G named -D named 2>/dev/null
adduser -S -h /etc/bind -s /sbin/nologin -G named -D named 2>/dev/null
exit 0
#!/bin/sh
addgroup chrony 2>/dev/null
addgroup -S chrony 2>/dev/null
adduser -S -G chrony -h /var/log/chrony -s /sbin/nologin -D chrony 2>/dev/null
exit 0
#!/bin/sh
adduser -H -s /sbin/nologin -D clamav 2>/dev/null
adduser -S -H -s /sbin/nologin -D clamav 2>/dev/null
exit 0
#!/bin/sh
adduser -H -s /sbin/nologin -D clamav 2>/dev/null
adduser -S -H -s /sbin/nologin -D clamav 2>/dev/null
exit 0
......@@ -10,5 +10,5 @@ if [ -f "$old" ] && [ ! -f "$new" ]; then
echo " *"
fi
adduser -H -s /bin/false -D clamav 2>/dev/null
adduser -S -H -s /bin/false -D clamav 2>/dev/null
exit 0
#!/bin/sh
adduser -H -s /sbin/nologin -D chilli 2>/dev/null
adduser -S -H -s /sbin/nologin -D chilli 2>/dev/null
exit 0
#!/bin/sh
addgroup cvechecker &>/dev/null
adduser cvechecker -h /var/cvechecker -DG cvechecker &>/dev/null
addgroup -S cvechecker &>/dev/null
adduser -S cvechecker -h /var/cvechecker -DG cvechecker &>/dev/null
#!/bin/sh
adduser -h /var/lib/dhcp -s /sbin/nologin -D dhcp 2>/dev/null
adduser -S -h /var/lib/dhcp -s /sbin/nologin -D dhcp 2>/dev/null
exit 0
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment