public inbox for gentoo-dev@lists.gentoo.org
 help / color / mirror / Atom feed
From: Michael Orlitzky <mjo@gentoo.org>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] Use acct-* for qmail users
Date: Tue, 10 Sep 2019 18:54:39 -0400	[thread overview]
Message-ID: <9bf50c71-0c9f-ed23-06b1-1fe042dbcc88@gentoo.org> (raw)
In-Reply-To: <2008949.DR2h0dBj5l@daneel.sf-tec.de>

On 9/10/19 4:25 PM, Rolf Eike Beer wrote:
> 
> I'm not entirely sure. It's what qmail always has done and what the eclass 
> also did.
> 

This is suggested by the qmail documentation,

  http://lifewithqmail.org/lwq.html#create-users

...but goes back to at least 1998, and likely earlier. I grepped the
source and don't see any obvious uses of $HOME. It was probably
suggested by DJB simply because it's a directory, and guaranteed to
exist on the various platforms that qmail supported at the time.

It would be best if someone who runs qmail could change them all to
/dev/null and see if anything breaks. The home directory is already
unwritable, and none of the users have shells, so I'm optimistic.

At present, the following code is repeated six times,

  ACCT_USER_HOME=/var/qmail
  ACCT_USER_HOME_OWNER=root:qmail
  ACCT_USER_HOME_PERMS=0755
  ACCT_USER_GROUPS=( nofiles )

and you have to keep them in sync for eternity. It would be less
error-prone if you could create that directory (and /var/qmail/alias)
only once, in the qmail ebuild, since that's the package that uses those
directories.


  reply	other threads:[~2019-09-10 22:54 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-09-10 15:48 [gentoo-dev] Use acct-* for qmail users Rolf Eike Beer
2019-09-10 19:14 ` Mike Gilbert
2019-09-10 20:25   ` Rolf Eike Beer
2019-09-10 22:54     ` Michael Orlitzky [this message]
2019-09-12 16:38       ` Rolf Eike Beer
2019-09-15  9:10         ` Rolf Eike Beer
2019-09-15 15:29           ` Mike Gilbert
2019-09-15 21:17             ` Rolf Eike Beer
2019-09-15 23:08               ` Mike Gilbert
2019-09-18 19:51             ` Rolf Eike Beer
2019-09-21  8:50               ` Rolf Eike Beer
2019-09-15 22:08   ` Peter Stuge
2019-09-15 23:10     ` Mike Gilbert

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=9bf50c71-0c9f-ed23-06b1-1fe042dbcc88@gentoo.org \
    --to=mjo@gentoo.org \
    --cc=gentoo-dev@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox