[gentoo-dev] Reserve mythtv user UID 103

[gentoo-dev] Reserve mythtv user UID 103

[The Bit Pit]

Howdy,

I'm a Proxy Maintainer in training.

I'd like to reserve a user mythtv for media-tv/mythtv. It is used for a daemon server mythbackend.

I selected UID 103 since my system used it before digital ATSC signals were available in the USA.

Re: [gentoo-dev] Reserve mythtv user UID 103

[Ulrich Mueller]

[-- Attachment #1: Type: text/plain, Size: 440 bytes --]

>>>>> On Fri, 23 Aug 2019, The Bit Pit wrote:

> I selected UID 103 since my system used it before digital ATSC signals
> were available in the USA.

Archlinux uses 103 for minio, so better choose something different.

AFAICS, next free UID would be 484 (counting from 499 downwards).
Alternatively, UID 117 is mentioned as an example by the MythTV wiki [1]
and would also be available.

Ulrich

[1] https://www.mythtv.org/wiki/Mediashares

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

Re: [gentoo-dev] Reserve mythtv user UID 103

[The Bit Pit]

I like your suggestion.  UID 117 is a better choice for mythtv.

On 8/24/19 7:22 AM, Ulrich Mueller wrote:
>>>>>> On Fri, 23 Aug 2019, The Bit Pit wrote:
>> I selected UID 103 since my system used it before digital ATSC signals
>> were available in the USA.
> Archlinux uses 103 for minio, so better choose something different.
>
> AFAICS, next free UID would be 484 (counting from 499 downwards).
> Alternatively, UID 117 is mentioned as an example by the MythTV wiki [1]
> and would also be available.
>
> Ulrich
>
> [1] https://www.mythtv.org/wiki/Mediashares

Re: [gentoo-dev] Reserve mythtv user UID 103

[Michał Górny]

[-- Attachment #1: Type: text/plain, Size: 209 bytes --]

On Sat, 2019-08-24 at 08:35 -0500, The Bit Pit wrote:
> I like your suggestion.  UID 117 is a better choice for mythtv.
> 

I suppose you want user+group, correct?

-- 
Best regards,
Michał Górny


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 618 bytes --]

Re: [gentoo-dev] Reserve mythtv user UID 103

[The Bit Pit]

[-- Attachment #1: Type: text/plain, Size: 509 bytes --]

Group is not needed.  mythtv uses the video group.  This is already in 
my pull request #12763 to bump to version 30.0 patch. I added myself as 
proxy maintainer to acct-user/mythtv

I need you to create a acct-group/uucp as it is not in the tree yet.

I hope this right as it is my first PR.

On 8/24/19 3:52 PM, Michał Górny wrote:
> On Sat, 2019-08-24 at 08:35 -0500, The Bit Pit wrote:
>> I like your suggestion.  UID 117 is a better choice for mythtv.
>>
> I suppose you want user+group, correct?
>


[-- Attachment #2: Type: text/html, Size: 1150 bytes --]

Re: [gentoo-dev] Reserve mythtv user UID 103

[Mike Gilbert]

On Sat, Aug 24, 2019 at 5:28 PM The Bit Pit <thebitpit@earthlink.net> wrote:
>
> Group is not needed.  mythtv uses the video group.  This is already in my pull request #12763 to bump to version 30.0 patch.  I added myself as proxy maintainer to acct-user/mythtv

I assume it is in the video group so that it can access device nodes in /dev?

It might be a nice idea to give it its own primary group id, This
ensures that files it creates will not be automatically exposed to any
other random users that are members of the "video" grooup. You can add
it to as many supplementary groups as you need.

> I need you to create a acct-group/uucp as it is not in the tree yet.

Please note that recent versions of udev/systemd use the "dialout"
group for serial devices instead of the old "uucp" group. You might
want to just switch over to that.

Re: [gentoo-dev] Reserve mythtv user UID 103

[The Bit Pit]

On 8/24/19 5:11 PM, Mike Gilbert wrote:
> On Sat, Aug 24, 2019 at 5:28 PM The Bit Pit <thebitpit@earthlink.net> wrote:
>> Group is not needed.  mythtv uses the video group.  This is already in my pull request #12763 to bump to version 30.0 patch.  I added myself as proxy maintainer to acct-user/mythtv
> I assume it is in the video group so that it can access device nodes in /dev?
That is correct.

mythtv also creates and displays many video files shared with other 
applications.  I thought the "video" group was a way to permit that. Is 
there a  better way than putting them in the "video" group?
>
> It might be a nice idea to give it its own primary group id, This
> ensures that files it creates will not be automatically exposed to any
> other random users that are members of the "video" group. You can add
> it to as many supplementary groups as you need.
>
>> I need you to create a acct-group/uucp as it is not in the tree yet.
> Please note that recent versions of udev/systemd use the "dialout"
> group for serial devices instead of the old "uucp" group. You might
> want to just switch over to that.
>
>
I agree and withdraw my request for "uucp" group.  It is in out of date 
mythtv documentation and the previous ebuild.

Should I check the use flags for flags enabling support for devices 
needing "dialout" group and modify the installed mythtv user rather than 
including group "dialout"  in the "acct-user/mythtv" package?

Re: [gentoo-dev] Reserve mythtv user UID 103

[Mike Gilbert]

On Sun, Aug 25, 2019 at 9:10 AM The Bit Pit <thebitpit@earthlink.net> wrote:
>
>
> On 8/24/19 5:11 PM, Mike Gilbert wrote:
> > On Sat, Aug 24, 2019 at 5:28 PM The Bit Pit <thebitpit@earthlink.net> wrote:
> >> Group is not needed.  mythtv uses the video group.  This is already in my pull request #12763 to bump to version 30.0 patch.  I added myself as proxy maintainer to acct-user/mythtv
> > I assume it is in the video group so that it can access device nodes in /dev?
> That is correct.
>
> mythtv also creates and displays many video files shared with other
> applications.  I thought the "video" group was a way to permit that. Is
> there a  better way than putting them in the "video" group?

The video group is primarily used by udev to grant access to graphics
hardware. Using the video group to control access to video recording
files seems wrong to me.

If you need a common group to allow access to files shared among
several applications, you should probably create a separate group for
that.

> >
> > It might be a nice idea to give it its own primary group id, This
> > ensures that files it creates will not be automatically exposed to any
> > other random users that are members of the "video" group. You can add
> > it to as many supplementary groups as you need.
> >
> >> I need you to create a acct-group/uucp as it is not in the tree yet.
> > Please note that recent versions of udev/systemd use the "dialout"
> > group for serial devices instead of the old "uucp" group. You might
> > want to just switch over to that.
> >
> >
> I agree and withdraw my request for "uucp" group.  It is in out of date
> mythtv documentation and the previous ebuild.
>
> Should I check the use flags for flags enabling support for devices
> needing "dialout" group and modify the installed mythtv user rather than
> including group "dialout"  in the "acct-user/mythtv" package?

I'm not sure it would be appropriate to modify the group membership of
the mythtv user within the media-tv/mythtv ebuild.

Maybe you could add USE flags to control group membership in the
acct-user/mythtv ebuild. You could then depend on these USE flags
withing the media-tv/mythtv ebuild as needed.

Or maybe I'm over-complicating this; opinions welcome.

Re: [gentoo-dev] Reserve mythtv user UID 103

[The Bit Pit]

On 8/25/19 12:29 PM, Mike Gilbert wrote:
> On Sun, Aug 25, 2019 at 9:10 AM The Bit Pit <thebitpit@earthlink.net> wrote:
>>
>> On 8/24/19 5:11 PM, Mike Gilbert wrote:
>>> On Sat, Aug 24, 2019 at 5:28 PM The Bit Pit <thebitpit@earthlink.net> wrote:
>>>> Group is not needed.  mythtv uses the video group.  This is already in my pull request #12763 to bump to version 30.0 patch.  I added myself as proxy maintainer to acct-user/mythtv
>>> I assume it is in the video group so that it can access device nodes in /dev?
>> That is correct.
>>
>> mythtv also creates and displays many video files shared with other
>> applications.  I thought the "video" group was a way to permit that. Is
>> there a  better way than putting them in the "video" group?
> The video group is primarily used by udev to grant access to graphics
> hardware. Using the video group to control access to video recording
> files seems wrong to me.
>
> If you need a common group to allow access to files shared among
> several applications, you should probably create a separate group for
> that.
>
OK! You have convinced me i need a mythtv group too.
>>> It might be a nice idea to give it its own primary group id, This
>>> ensures that files it creates will not be automatically exposed to any
>>> other random users that are members of the "video" group. You can add
>>> it to as many supplementary groups as you need.
>>>
>>>> I need you to create a acct-group/uucp as it is not in the tree yet.
>>> Please note that recent versions of udev/systemd use the "dialout"
>>> group for serial devices instead of the old "uucp" group. You might
>>> want to just switch over to that.
>>>
>>>
>> I agree and withdraw my request for "uucp" group.  It is in out of date
>> mythtv documentation and the previous ebuild.
>>
>> Should I check the use flags for flags enabling support for devices
>> needing "dialout" group and modify the installed mythtv user rather than
>> including group "dialout"  in the "acct-user/mythtv" package?
> I'm not sure it would be appropriate to modify the group membership of
> the mythtv user within the media-tv/mythtv ebuild.
>
> Maybe you could add USE flags to control group membership in the
> acct-user/mythtv ebuild. You could then depend on these USE flags
> withing the media-tv/mythtv ebuild as needed.
>
> Or maybe I'm over-complicating this; opinions welcome.
>
>
I like this idea. It would eliminate an awkward entry in media-tv/mythtv 
ebuilds.

It will automatically install the required acct-group/... package and 
add groups to mythtv user. This puts the control of a user's group in 
the acct-user/... package where it logically belongs. The same use flag 
that enables an option in media-tv/mythtv can also be used in 
acct-user/mythtv to add groups.