From: David DEMELIER on
Hi,

I used pkgsrc for a while on NetBSD. I was used to the pkgsrc
notifications about the users and groups leaves, when some ports are
removed these leaves are not used anymore. e.g pulseaudio needs some
users on the system.

Then the pkgsrc framework says to the user that are some users not
used anymore and they could remove them safely.

Ports has the lack of this kind of notification, that's why I would
start writing a patch in the ports infrastructure, or maybe someone
already proposed something else ?

I apologize for my bad english.

King regards.

--
Demelier David
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Florent Thoumie on
On Fri, May 21, 2010 at 11:11 AM, David DEMELIER
<demelier.david(a)gmail.com> wrote:
> Hi,
>
> I used pkgsrc for a while on NetBSD. I was used to the pkgsrc
> notifications about the users and groups leaves, when some ports are
> removed these leaves are not used anymore. e.g pulseaudio needs some
> users on the system.
>
> Then the pkgsrc framework says to the user that are some users not
> used anymore and they could remove them safely.
>
> Ports has the lack of this kind of notification, that's why I would
> start writing a patch in the ports infrastructure, or maybe someone
> already proposed something else ?
>
> I apologize for my bad english.

This was discussed in the following bug-report:

http://www.freebsd.org/cgi/query-pr.cgi?pr=108514

I think the proper solution is to create a +UGIDS file to be able to
maintain a refcount, but the status quo isn't that bad.

--
Florent Thoumie
flz(a)FreeBSD.org
FreeBSD Committer
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: RW on
On Fri, 21 May 2010 16:23:18 +0100
Florent Thoumie <flz(a)xbsd.org> wrote:

> On Fri, May 21, 2010 at 11:11 AM, David DEMELIER
> <demelier.david(a)gmail.com> wrote:
> > Hi,
> >
> > I used pkgsrc for a while on NetBSD. I was used to the pkgsrc
> > notifications about the users and groups leaves, when some ports are
> > removed these leaves are not used anymore. e.g pulseaudio needs some
> > users on the system.
> >
>
> This was discussed in the following bug-report:
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=108514
>
> I think the proper solution is to create a +UGIDS file to be able to
> maintain a refcount, but the status quo isn't that bad.

Personally I'd much prefer to keep them so ls -l, filemanagers etc can
continue to use names rather than numbers for any files left behind.

IMO the status quo is better than any solution that involves automated
deletion.
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Garrett Cooper on
On Fri, May 21, 2010 at 4:53 PM, RW <rwmaillists(a)googlemail.com> wrote:
> On Fri, 21 May 2010 16:23:18 +0100
> Florent Thoumie <flz(a)xbsd.org> wrote:
>
>> On Fri, May 21, 2010 at 11:11 AM, David DEMELIER
>> <demelier.david(a)gmail.com> wrote:
>> > Hi,
>> >
>> > I used pkgsrc for a while on NetBSD. I was used to the pkgsrc
>> > notifications about the users and groups leaves, when some ports are
>> > removed these leaves are not used anymore. e.g pulseaudio needs some
>> > users on the system.
>> >
>>
>> This was discussed in the following bug-report:
>>
>> http://www.freebsd.org/cgi/query-pr.cgi?pr=108514
>>
>> I think the proper solution is to create a +UGIDS file to be able to
>> maintain a refcount, but the status quo isn't that bad.
>
> Personally I'd much prefer to keep them so ls -l, filemanagers etc can
> continue to use names rather than numbers for any files left behind.
>
> IMO the status quo is better than any solution that involves automated
> deletion.

I agree by and large with RW, but it would be nice if there was an
audit tool to do this check and suggest whether or not a group should
be added or removed in general, regardless of whether or not a
pkg/port was added or removed.
Thanks,
-Garrett
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: jhell on
On 05/21/2010 20:08, Garrett Cooper wrote:
> On Fri, May 21, 2010 at 4:53 PM, RW <rwmaillists(a)googlemail.com> wrote:
>> On Fri, 21 May 2010 16:23:18 +0100
>> Florent Thoumie <flz(a)xbsd.org> wrote:
>>
>>> On Fri, May 21, 2010 at 11:11 AM, David DEMELIER
>>> <demelier.david(a)gmail.com> wrote:
>>>> Hi,
>>>>
>>>> I used pkgsrc for a while on NetBSD. I was used to the pkgsrc
>>>> notifications about the users and groups leaves, when some ports are
>>>> removed these leaves are not used anymore. e.g pulseaudio needs some
>>>> users on the system.
>>>>
>>>
>>> This was discussed in the following bug-report:
>>>
>>> http://www.freebsd.org/cgi/query-pr.cgi?pr=108514
>>>
>>> I think the proper solution is to create a +UGIDS file to be able to
>>> maintain a refcount, but the status quo isn't that bad.
>>
>> Personally I'd much prefer to keep them so ls -l, filemanagers etc can
>> continue to use names rather than numbers for any files left behind.
>>
>> IMO the status quo is better than any solution that involves automated
>> deletion.
>
> I agree by and large with RW, but it would be nice if there was an
> audit tool to do this check and suggest whether or not a group should
> be added or removed in general, regardless of whether or not a
> pkg/port was added or removed.
> Thanks,
> -Garrett

find(1) is already used by periodic(1) through weekly_noid_enable which
should probably be extended to also include weekly_nogid_enable and
would ultimately alert you to users and groups that have gone missing
due to a port removal.

Having unused logins on a system is bad! and just for the case of
mapping to uid/gid does not justify leaving them. uid & gid printed in
ls(1) output may be ugly as well but you can not log in with one of
those and they should be handled in a way that is prompt to login removal.

find / -nouser
find / -nogroup

and then after inspection add -delete -print.

find / -empty

Of course these can be combined to form a simple one line command but I
will leave that as a exercise for the reader.

Regards,

--

jhell
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"