From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 353861382C5 for ; Mon, 12 Feb 2018 00:33:02 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 86C87E0E09; Mon, 12 Feb 2018 00:32:56 +0000 (UTC) Received: from mail-pg0-x231.google.com (mail-pg0-x231.google.com [IPv6:2607:f8b0:400e:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 2BAD0E0E01 for ; Mon, 12 Feb 2018 00:32:56 +0000 (UTC) Received: by mail-pg0-x231.google.com with SMTP id u1so6412879pgr.0 for ; Sun, 11 Feb 2018 16:32:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=Uwry2VkKPvv44jEZ2NAxzUdpOjXWsOKyTl2e9vwJU+I=; b=CpwBUnIQdRWcjxdRsWKPZcjyzSCdCaovfecx9Xt98MHQhY/nv8qLn0zAQ2wfO6JEYE VF265TxnalvgN4Jdcm9B8UbFLcGkRKFSd3z1ep5tGVxFdQcYyacCqe8LMP0YmztPqYgM E9kdSFZ2mgrIh7cr04qZPrlC2bppodcXLjpY/6TPgFggEIve9I2+jsuqa63+cq9OJW9S X7KrWaKxZHTSAXlit7ggCZ4RGrv4Ix7Yfg6I31GWeV320k3X2DSI/QhZ2xVpQ4dqXpR/ coXetEIy8UG7CrHNFfUgSnjEt7LdzjGjmYsI+nZsZm54cdpnETBUUOKfusRYJg6KIpMT 7j6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=Uwry2VkKPvv44jEZ2NAxzUdpOjXWsOKyTl2e9vwJU+I=; b=CnLJLy3hfE1A/rCm1JEI/0nE7NJM9aPd/t0VBYqymSX9DmTrCibJuCYcP/VzvRL2fI RHKBECpKbb7OgiqoVC3poxZWVdPTiaprJ5jyYFRe7Cgk5GoYud8F4jbtZKU5hOWHznTu H7A1x1xv8JvP2bHfUtXLKwNNBoOoffkB2u8+04JZwFTp3s3nCO7TZjVSzGyIpT776f3s fQD3C/JzpDQ+87nNoLF/Do82+2sVKaCi6aANee3CvWmOQgix7y8sA09YsZNPjsZ7QrTl lhV5mFdPvVJARGA4GvG+MRH4MpR+I+kQ110uQHaZM5E6zWbsMuMqrbGHR03STjQ6tcVr R/cQ== X-Gm-Message-State: APf1xPBOFZo/Y6Mhb438biviGKCi8XB6dxoxEMm719rqdj4GDEVtWYU4 4I+W8XPBURmUQeF4xH54P9BRMB3F+PPngrlqHmMNLQ== X-Google-Smtp-Source: AH8x226Kn9Etw8fpNjd25+wt5caeC+7Uj96Wo1B5C8fPKG1LzRHC/mRudmmZkRQ2Sk+vtbdoB+BiQlHEKz19ImTVhCI= X-Received: by 10.99.170.10 with SMTP id e10mr7706351pgf.92.1518395574950; Sun, 11 Feb 2018 16:32:54 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Sender: freemanrich@gmail.com Received: by 10.100.134.1 with HTTP; Sun, 11 Feb 2018 16:32:54 -0800 (PST) In-Reply-To: <2406014.bCckGnqSOt@reaper> References: <2406014.bCckGnqSOt@reaper> From: Rich Freeman Date: Sun, 11 Feb 2018 19:32:54 -0500 X-Google-Sender-Auth: I52OrQvmlr7eue5l8ujObq6Gilw Message-ID: Subject: Re: [gentoo-dev] [RFC] systemd's DynamicUser= in .service files To: gentoo-dev Content-Type: text/plain; charset="UTF-8" X-Archives-Salt: dd44f074-8afe-4b12-b554-c057c0dae5bf X-Archives-Hash: 1c5b7a12f48287f671bbf59e42c90742 On Sun, Feb 11, 2018 at 6:46 PM, Georgy Yakovlev wrote: > > What I'm asking for is your opinion if it's something that should be used in > gentoo or should I try to avoid it if possible, especially if a static user is > alredy present in the system. > If the systemd behavior is to just fall back to the static user if it exists, I don't see the point in disabling it, since at worst it is a noop, and at best it could be useful on stateless systems/etc. I suspect that unit files that enable this came from upstream sources, and it seems like a bad idea to go patching an upstream unit file just to disable something that doesn't cause an issue. -- Rich