Commit ccc056db authored by Przemysław Pawełczyk's avatar Przemysław Pawełczyk Committed by Natanael Copa
Browse files

Add lacking -S option (system) to adduser/addgroup in scripts.

Groups and users created by packages shouldn't use high ids by default
(unless explicitly requested), to distinguish them from groups and users
created by administrators for humans.

Following 41 files lacked -S next to addgroup:
- community/sword/sword.pre-install
- main/amavisd-new/amavisd-new.pre-install
- main/chrony/chrony.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dnsmasq/dnsmasq.pre-install
- main/freeradius/freeradius.pre-install
- main/gdnsd/gdnsd.pre-install
- main/haproxy/haproxy.pre-install
- main/haproxy/haproxy.pre-upgrade
- main/kamailio/kamailio.pre-install
- main/logcheck/logcheck.pre-install
- main/mlmmj/mlmmj.pre-install
- main/nrpe/nrpe.pre-install
- main/open-vm-tools/open-vm-tools.pre-install
- main/postgrey/postgrey.pre-install
- main/privoxy/privoxy.pre-install
- main/redis/redis.pre-install
- main/samba/winbind.pre-install
- main/sircbot/sircbot.pre-install
- main/smokeping/smokeping.pre-install
- main/squark/squark.post-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/vsftpd/vsftpd.pre-install
- main/zabbix/zabbix-agent.pre-install
- testing/3proxy/3proxy.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/elasticsearch/elasticsearch.pre-install
- testing/emby/emby.pre-install
- testing/gdnsd/gdnsd.pre-install
- testing/icinga2/icinga2.pre-install
- testing/lusca/lusca.pre-install
- testing/lusca/lusca.pre-upgrade
- testing/mongodb/mongodb.pre-install
- testing/openxcap/openxcap.pre-install
- testing/prosody/prosody.pre-install
- testing/rancid/rancid.pre-install
- testing/rutorrent/rutorrent.pre-install
- testing/zabbix/zabbix-agent.pre-install

Following 60 files lacked -S next to adduser:
- community/caddy/caddy.pre-install
- community/domoticz/domoticz.pre-install
- community/minetest/minetest-server.pre-install
- community/oscam/oscam.pre-install
- community/seafile/seafile-server.pre-install
- community/syncthing/syncthing.pre-install
- main/apache2/apache2.pre-install
- main/aports-build/aports-build.pre-install
- main/atheme-iris/atheme-iris.pre-install
- main/bind/bind.pre-install
- main/clamav/clamav-db.pre-install
- main/clamsmtp/clamsmtp.pre-install
- main/clamsmtp/clamsmtp.pre-upgrade
- main/coova-chilli/coova-chilli.pre-install
- main/cvechecker/cvechecker.pre-install
- main/dhcp/dhcp.pre-install
- main/distcc/distcc.pre-install
- main/djbdns/dnscache.pre-install
- main/djbdns/tinydns.pre-install
- main/dovecot/dovecot.pre-install
- main/ez-ipupdate/ez-ipupdate.pre-install
- main/fetchmail/fetchmail.pre-install
- main/freeswitch/freeswitch.pre-install
- main/gitolite/gitolite.pre-install
- main/gnats/gnats.pre-install
- main/gross/gross.pre-install
- main/icecast/icecast.pre-install
- main/kamailio/kamailio.pre-install
- main/lighttpd/lighttpd.pre-install
- main/mariadb/mariadb.pre-install
- main/memcached/memcached.pre-install
- main/ngircd/ngircd.pre-install
- main/nrpe/nrpe.pre-install
- main/openntpd/openntpd.pre-install
- main/postgrey/postgrey.pre-install
- main/snort/snort.pre-install
- main/squid/squid.pre-install
- main/squid/squid.pre-upgrade
- main/subversion/subversion.pre-install
- main/trac/trac.pre-install
- main/transmission/transmission-daemon.pre-install
- main/ympd/ympd.pre-install
- main/znc/znc.pre-install
- testing/at/at.pre-install
- testing/buildbot-slave/buildbot-slave.pre-install
- testing/buildbot/buildbot.pre-install
- testing/clapf/clapf.pre-install
- testing/cluster-glue/cluster-glue.pre-install
- testing/dbmail/dbmail.pre-install
- testing/dspam/dspam.pre-install
- testing/ejabberd/ejabberd.pre-install
- testing/emby/emby.pre-install
- testing/mongodb/mongodb.pre-install
- testing/opensips/opensips.pre-install
- testing/pdns/pdns.pre-install
- testing/prosody/prosody.pre-install
- testing/qpage/qpage.pre-install
- testing/rrdbot/rrdbot.pre-install
- testing/wt/wt.pre-install
- unmaintained/ejabberd-git/ejabberd-git.pre-install
parent 2a573734
#!/bin/sh
adduser -H -D -s /sbin/nologin -G audio ympd 2>/dev/null
adduser -S -H -D -s /sbin/nologin -G audio ympd 2>/dev/null
exit 0
#!/bin/sh
addgroup zabbix 2>/dev/null
addgroup -S zabbix 2>/dev/null
adduser -S -H -h /dev/null -s /sbin/nologin -D -G zabbix zabbix 2>/dev/null
addgroup -g 30 zabbix 2>/dev/null
exit 0
#!/bin/sh
adduser -H -D -s /sbin/nologin znc 2>/dev/null
adduser -S -H -D -s /sbin/nologin znc 2>/dev/null
exit 0
#!/bin/sh
addgroup 3proxy 2>/dev/null
addgroup -S 3proxy 2>/dev/null
adduser -S -G 3proxy -h /var/log/3proxy -s /sbin/nologin -D 3proxy 2>/dev/null
exit 0
......@@ -5,7 +5,7 @@ if ! getent group at >/dev/null; then
fi
if ! getent passwd at >/dev/null; then
adduser -H -s /bin/false -D at 2>/dev/null
adduser -S -H -s /bin/false -D at 2>/dev/null
fi
if [ -z `echo " $(groups at) " | grep ' at '`] ; then
......
#!/bin/sh
adduser -H -h /home/buildbot -g buildbot -D -s /sbin/nologin buildbot 2>/dev/null
adduser -S -H -h /home/buildbot -g buildbot -D -s /sbin/nologin buildbot 2>/dev/null
exit 0
#!/bin/sh
adduser -H -h /home/buildbot -g buildbot -D -s /sbin/nologin buildbot 2>/dev/null
adduser -S -H -h /home/buildbot -g buildbot -D -s /sbin/nologin buildbot 2>/dev/null
exit 0
#!/bin/sh
adduser -H -s /bin/false -D clamav 2>/dev/null
adduser -S -H -s /bin/false -D clamav 2>/dev/null
exit 0
#!/bin/sh
addgroup haclient 2>/dev/null
adduser hacluster \
addgroup -S haclient 2>/dev/null
adduser -S hacluster \
-h /var/lib/heartbeat/cores/hacluster \
-G haclient \
-s /sbin/nologin \
......
#!/bin/sh
adduser -s /bin/false -D -H -h /var/lib/dbmail dbmail 2>/dev/null
adduser -S -s /bin/false -D -H -h /var/lib/dbmail dbmail 2>/dev/null
exit 0
#!/bin/sh
adduser -h /var/lib/dspam -s /bin/false -D dspam 2>/dev/null
adduser -S -h /var/lib/dspam -s /bin/false -D dspam 2>/dev/null
chown dspam:dspam /var/lib/dspam
exit 0
#!/bin/sh
adduser -H -h /var/lib/ejabberd -G ejabberd -D ejabberd 2>/dev/null
adduser -S -H -h /var/lib/ejabberd -G ejabberd -D ejabberd 2>/dev/null
exit 0
#!/bin/sh
addgroup elastico
addgroup -S elastico
adduser -S -h /var/lib/elasticsearch -s /sbin/nologin -G elastico \
-g "added by apk for elasticsearch" -DH elastico
......
#!/bin/sh
addgroup emby 2>/dev/null
adduser -D -h /var/lib/emby -s /sbin/nologin -g "Emby media server" \
addgroup -S emby 2>/dev/null
adduser -S -D -h /var/lib/emby -s /sbin/nologin -g "Emby media server" \
-G emby emby 2>/dev/null
exit 0
#!/bin/sh
addgroup gdnsd 2>/dev/null
addgroup -S gdnsd 2>/dev/null
adduser -S -H -h /dev/null -s /sbin/nologin -D -G gdnsd gdnsd 2>/dev/null
exit 0
#!/bin/sh
adduser -S -D lusca -h /var/cache/lusca -s /sbin/nologin 2>/dev/null
addgroup winbind 2>/dev/null
addgroup -S winbind 2>/dev/null
addgroup lusca winbind
exit 0
#!/bin/sh
adduser -S -D lusca -h /var/cache/lusca -s /sbin/nologin 2>/dev/null
addgroup winbind 2>/dev/null
addgroup -S winbind 2>/dev/null
addgroup lusca winbind
exit 0
#!/bin/sh
addgroup mongodb
adduser -D -G mongodb -h /var/lib/mongodb -s /sbin/nologin mongodb
addgroup -S mongodb
adduser -S -D -G mongodb -h /var/lib/mongodb -s /sbin/nologin mongodb
exit 0
#!/bin/sh
adduser -H -h /var/empty -s /bin/false -D opensips 2>/dev/null
adduser -S -H -h /var/empty -s /bin/false -D opensips 2>/dev/null
exit 0
#!/bin/sh
addgroup openxcap 2>/dev/null
addgroup -S openxcap 2>/dev/null
adduser -S -G openxcap -h /var/run/openxcap -s /bin/false -D -H openxcap 2>/dev/null
exit 0
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment