Project

General

Profile

Bug #33765

Create the Pulp user as system user without a login shell

Added by Ewoud Kohl van Wijngaarden 10 months ago. Updated 6 months ago.

Status:
Closed
Priority:
Normal
Category:
Foreman modules
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Fixed in Releases:
Found in Releases:

Description

The pulp account is created with the default login shell (usually /bin/bash) but it doesn't need to log in so it should be /sbin/nologin.

It should also be considered to make it a system account, but that can lead to a complex migration.


Related issues

Related to Installer - Bug #34379: Create the Pulp group as system groupClosed

Associated revisions

Revision 5a7991ab (diff)
Added by Ewoud Kohl van Wijngaarden 10 months ago

Fixes #33765 - Use a system user without a login shell

The user pulp doesn't need to login so it's set to /sbin/nologin.

It should also be a system user. This doesn't affect exsting
installations, but it ensures fresh installations are clean. From
useradd's man page:

System users will be created with no aging information in
/etc/shadow, and their numeric identifiers are chosen in the
SYS_UID_MIN-SYS_UID_MAX range, defined in /etc/login.defs, instead
of UID_MIN-UID_MAX (and their GID counterparts for the creation of
groups).

This typically means newly created pulp users will end up with a UID <
1000 while with the current code it's > 1000.

History

#1 Updated by The Foreman Bot 10 months ago

  • Assignee set to Ewoud Kohl van Wijngaarden
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/puppet-pulpcore/pull/237 added

#2 Updated by Ewoud Kohl van Wijngaarden 10 months ago

  • Subject changed from There is a new login account in satellite 6.9 to Create the Pulp user as system user without a login shell

#3 Updated by Ewoud Kohl van Wijngaarden 10 months ago

  • Triaged changed from No to Yes
  • Category set to Foreman modules

#4 Updated by Ewoud Kohl van Wijngaarden 10 months ago

  • Status changed from Ready For Testing to Closed

#5 Updated by Ewoud Kohl van Wijngaarden 6 months ago

  • Target version set to 3.1.0
  • Fixed in Releases 3.1.0 added

This was actually shipped in 3.1.0 but I think the bot missed it.

#6 Updated by Ewoud Kohl van Wijngaarden 6 months ago

  • Related to Bug #34379: Create the Pulp group as system group added

Also available in: Atom PDF