From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1MLiDy-0000JJ-MC for garchives@archives.gentoo.org; Tue, 30 Jun 2009 18:38:34 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D199BE033A; Tue, 30 Jun 2009 18:38:33 +0000 (UTC) Received: from mail-ew0-f211.google.com (mail-ew0-f211.google.com [209.85.219.211]) by pigeon.gentoo.org (Postfix) with ESMTP id 98B4FE033A for ; Tue, 30 Jun 2009 18:38:33 +0000 (UTC) Received: by ewy7 with SMTP id 7so417687ewy.34 for ; Tue, 30 Jun 2009 11:38:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:to:subject:date :user-agent:references:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:message-id; bh=V0vaEwsYxiAwd0cwmx26yc7I+tW/PFYAz7zzo2/dzIQ=; b=uhr18idMioHS+gb8HFV0Di2mhukCIKxKzf3/7admBBWhmd2YQg2LVUlSgZF2k1jsQs YcRdrQ27/DUPzqcVxWYe26PqoUQ7z7OZg4IlfZe082SYZ9f5pf6w+EY+P6PiodxRF60Z LnHjnd/r3iCkrprHnN1V4f92iqsvOCERNOOkU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:to:subject:date:user-agent:references:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :message-id; b=aCXZYVIMgVz2WAb9Vh9p0hZf5b450UoaguLFAN0EIGkVNWoQ9prvCnyzRd/Y8HBRlQ pKXREUX4kEi9Zbfjh11f+JNfz5KJKiMi31qCot7OjUfC2wW/KJ4VAmC1tquviyqYvW6p Uyuas3PxKgUNo/4Mljj4FJ2nPmWs5Gosla9Tc= Received: by 10.210.71.13 with SMTP id t13mr535468eba.37.1246387112644; Tue, 30 Jun 2009 11:38:32 -0700 (PDT) Received: from nazgul.localnet ([196.210.202.245]) by mx.google.com with ESMTPS id 24sm1049658eyx.3.2009.06.30.11.38.31 (version=SSLv3 cipher=RC4-MD5); Tue, 30 Jun 2009 11:38:32 -0700 (PDT) From: Alan McKinnon To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Why did this happen? Date: Tue, 30 Jun 2009 20:36:50 +0200 User-Agent: KMail/1.11.4 (Linux/2.6.30-gentoo-r1; KDE/4.2.4; x86_64; ; ) References: <20090630105423.6a951e6a@lappy.evolone.org> In-Reply-To: <20090630105423.6a951e6a@lappy.evolone.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200906302036.50800.alan.mckinnon@gmail.com> X-Archives-Salt: 472cb2ab-a44e-4b8d-aa94-07b40dd7c0cf X-Archives-Hash: 081ed4fe8b7883174bdb20217071fca4 On Tuesday 30 June 2009 19:54:23 Michael Higgins wrote: > Can anyone speculate as to why this error? > > Is the fix to usermod -s /sbin/nologin for each of these? > > > ebuild log for sys-apps/baselayout-2.0.1 on evolone.org > > > WARN: postinst > The following users have non-existent shells! > apache - /usr/sbin/nologin > cron - /usr/sbin/nologin > ldap - /usr/sbin/nologin > postfix - /usr/sbin/nologin > sshd - /usr/sbin/nologin Do not make any changes, this is correct. System users should not have a shell, as the account is never used to log in (not the same thing as dropping privileges to the UID of the account). This is a prime example of a daft ebuild. The ebuild should have checked that a) the account does not have a shell and b) the account uid falls in the range of system accounts as per login.defs and c) therefore issued no postinst You should file a bug. -- alan dot mckinnon at gmail dot com