From b08a174c21f5605ac79b2269bf5196aacd5a32b1 Mon Sep 17 00:00:00 2001 From: Björn Esser Date: Oct 05 2021 12:27:45 +0000 Subject: Add auth, chkpwd, and shadow groups Those are used for the tcb password shadowing scheme, and need to be present on every installation. FPC ticket: https://pagure.io/packaging-committee/issue/1107. Signed-off-by: Björn Esser --- diff --git a/group b/group index 13a6276..c5d5830 100644 --- a/group +++ b/group @@ -21,4 +21,7 @@ ftp::50: lock::54: audio::63: users::100: +shadow::101: +chkpwd::121: +auth::197: nobody::65534: diff --git a/uidgid b/uidgid index 3396364..dec05b7 100644 --- a/uidgid +++ b/uidgid @@ -109,6 +109,7 @@ dovecot 97 97 /usr/libexec/dovecot /sbin/nologin dovecot ident 98 98 / /sbin/nologin ident # Note: 99 used to be the old uid for nobody, now moved to 65534, do not reuse users - 100 - - setup +shadow - 101 - - setup,tcb-sysusers input - 104 - - setup render - 105 - - setup sgx - 106 - - setup @@ -119,6 +120,7 @@ jetty 110 110 /usr/share/jetty /sbin/nologin jetty saned 111 111 / /sbin/nologin sane-backends vhostmd 112 112 /usr/share/vhostmd /sbin/nologin vhostmd usbmuxd 113 113 / /sbin/nologin usbmuxd +chkpwd - 121 - - setup,tcb-sysusers bacula 133 133 /var/spool/bacula /sbin/nologin bacula cimsrvr 134 134 / /sbin/nologin tog-pegasus-libs mock - 135 / - mock @@ -164,6 +166,7 @@ systemd-journal - 190 - - systemd #systemd-journal-gateway 191 191 / /sbin/nologin systemd #dynamic on new systems, removed Dec2014, can be freed if necessary later systemd-network 192 192 / /sbin/nologin systemd systemd-resolve 193 193 / /sbin/nologin systemd +auth - 197 - - setup,tcb-sysusers gnats ? ? ? ? gnats, gnats-db listar ? ? ? ? listar nobody 65534 65534 / /sbin/nologin setup