Create magic ‘nss-nonlocal-users’ user

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

diff --git a/debian/changelog b/debian/changelog
index 8b667a0fb090b8d3d693020e5e78d9e02cea7cd4..45efa58ae03028bf4fdc34eba5b754869e932ed1 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,7 @@ libnss-nonlocal (2.0-0debathena1) UNRELEASED; urgency=low
     - Document nss-nonlocal-users and nss-local-users groups in README.
     - Allow local whitelisting of nonlocal user and group memberships,
       using the magic local ‘nss-nonlocal-users’ user and group.
+  * Create magic ‘nss-nonlocal-users’ user.
 
  -- Anders Kaseorg <andersk@mit.edu>  Tue, 29 Mar 2011 00:45:31 -0400
 

diff --git a/debian/libnss-nonlocal.postrm b/debian/libnss-nonlocal.postrm
index 72967e1423af24dea3d532ee14f14a9d4e7c9774..88c224f0b22bec4d6e25f03cc0622083417fac9b 100644 (file)
--- a/debian/libnss-nonlocal.postrm
+++ b/debian/libnss-nonlocal.postrm
@@ -21,6 +21,9 @@ set -e
 
 case "$1" in
     purge)
+       if getent passwd nss-nonlocal-users >/dev/null; then
+           deluser --system nss-nonlocal-users || :
+       fi
        if getent group nss-local-users >/dev/null; then
            delgroup --system nss-local-users || :
        fi

diff --git a/debian/libnss-nonlocal.preinst b/debian/libnss-nonlocal.preinst
index 4cb573388f063b1b466cc53c3fd7cb8d91f96527..d1815fa74e1c452256e9e5339d245bf8da845974 100644 (file)
--- a/debian/libnss-nonlocal.preinst
+++ b/debian/libnss-nonlocal.preinst
@@ -16,6 +16,11 @@ set -e
 
 case "$1" in
     install|upgrade)
+       if ! getent passwd nss-nonlocal-users >/dev/null; then
+           adduser --system --no-create-home --home /nonexistent \
+               --gecos 'Magic user for local group whitelist' \
+               nss-nonlocal-users
+       fi
        if ! getent group nss-local-users >/dev/null; then
            addgroup --system nss-local-users
        fi