#42 uidgid: assign UID/GID 114 for 'polkitd' (rhbz#2104615 - fpc#1189)
Merged 2 years ago by mosvald. Opened 2 years ago by lucab.

file modified
+1
@@ -121,6 +121,7 @@ 

  saned	111	111	/		/usr/sbin/nologin	sane-backends

  vhostmd	112	112	/usr/share/vhostmd		/usr/sbin/nologin	vhostmd

  usbmuxd	113	113	/		/usr/sbin/nologin	usbmuxd

+ polkitd	114	114	/		/usr/sbin/nologin	polkit

  bacula	133	133	/var/spool/bacula		/usr/sbin/nologin	bacula

  cimsrvr	134	134	/		/usr/sbin/nologin	tog-pegasus-libs

  mock	-	135	/		-	mock

This records the static allocation of UID and GID 114 to polkitd
in use by polkit. See FPC ticket for discussion/approval.

Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2104615
Ref: https://pagure.io/packaging-committee/issue/1189

Pull-Request has been closed by lucab

2 years ago

Pull-Request has been reopened by lucab

2 years ago

This is now ready to merge.
/cc @mosvald

Hi @lucab ,

Thank you for the patch! but wondering do you know which pkg is using polkituser?

https://pagure.io/setup/blob/master/f/uidgid#_99

/cc @jrybar

I think that was the user/group from the PolicyKit package: https://src.fedoraproject.org/rpms/PolicyKit/blob/f11/f/PolicyKit.spec

It seems to have been retired in F12.

Just to make it clear, PolicyKit is the old name for polkit. Debian still uses it though. Are we REALLY sure we can remove the 'polkituser' (from PolicyKit package) from the list?

This PR is not removing polkituser from the list (plus, that discussion doesn't matter much, this list is only for allocation purposes; users/groups are only created by packages).

I know this is not about removing polkituser, but IT SHOULD BE. The list tracks UIDs/GIDs reserved for specific users/services and this MR requests another UID/GID for polkit, formerly PolicyKit. So NO, this IS about polkituser also!

Please keep this discussion to a polite tone. No need to shout, nor to be rude.

It is indeed a bit unfortunate that there used to be an allocation for polkituser and that the package is using a different dynamic user instead.
From the point of view of installed systems though, at the moment, those are different and unrelated users.

Overall I'm still trying to address https://bugzilla.redhat.com/show_bug.cgi?id=2104615, how do we unblock ourselves here?

Having two users and their respective static uids is not good. The maintainer of setup mentioned that removal of the older (and probably (!) unused) one (polkituser) requires another Fesco discussion and approval. I will talk to him about the situation that there would be two polkit users until one of them is removed. That also depends on the other discussion on Packaging Committee. But I call it a day today.

Honestly, I would go ahead and merge this PR and solve the polkituser later.

Pull-Request has been merged by mosvald

2 years ago
Metadata
Changes Summary 1