Move user and group creation to separate libnss-nonlocal-common package

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

diff --git a/debian/changelog b/debian/changelog
index b91413a1099a168a50cf5c02177d42eba23ef9b4..2a4e94ffd5f33e9e12c5e0c45efcf0274806089f 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,8 @@ libnss-nonlocal (2.1-0debathena1) UNRELEASED; urgency=low
     - Guard one-time initialization with memory barriers.
     - Make initgroups_dyn succeed when adding only magic groups.
   * Rewrite packaging with Debhelper 7.
+  * Move magic user and group creation to separate libnss-nonlocal-common
+    package.
 
  -- Anders Kaseorg <andersk@mit.edu>  Wed, 12 Jun 2013 20:02:33 -0400
 

diff --git a/debian/control b/debian/control
index f2c66816b7394e727230a3a5547baec2a2de9e05..2b318064dd6c906d713c75482b1931bff9aab14f 100644 (file)
--- a/debian/control
+++ b/debian/control
@@ -13,8 +13,9 @@ Build-Depends: debhelper (>= 7.0.50~),
 
 Package: libnss-nonlocal
 Architecture: any
-Pre-Depends: ${misc:Pre-Depends}, adduser
+Pre-Depends: ${misc:Pre-Depends}
 Depends: ${shlibs:Depends}, ${misc:Depends}
+Recommends: libnss-nonlocal-common
 Description: nsswitch proxy module to prevent local account spoofing
  This nsswitch module acts as a proxy for other nsswitch modules like 
  hesiod, but prevents non-local users from potentially gaining local 
@@ -22,8 +23,9 @@ Description: nsswitch proxy module to prevent local account spoofing
 
 Package: lib32nss-nonlocal
 Architecture: amd64
-Pre-Depends: ${misc:Pre-Depends}, adduser
+Pre-Depends: ${misc:Pre-Depends}
 Depends: ${shlibs:Depends}, ${misc:Depends}
+Recommends: libnss-nonlocal-common
 Description: nsswitch proxy module to prevent local account spoofing (32-bit library)
  This nsswitch module acts as a proxy for other nsswitch modules like 
  hesiod, but prevents non-local users from potentially gaining local 
@@ -34,8 +36,9 @@ Description: nsswitch proxy module to prevent local account spoofing (32-bit lib
 
 Package: lib64nss-nonlocal
 Architecture: i386
-Pre-Depends: ${misc:Pre-Depends}, adduser
+Pre-Depends: ${misc:Pre-Depends}
 Depends: ${shlibs:Depends}, ${misc:Depends}
+Recommends: libnss-nonlocal-common
 Description: nsswitch proxy module to prevent local account spoofing (64-bit library)
  This nsswitch module acts as a proxy for other nsswitch modules like 
  hesiod, but prevents non-local users from potentially gaining local 
@@ -43,3 +46,15 @@ Description: nsswitch proxy module to prevent local account spoofing (64-bit lib
  .
  This package contains a 64-bit version of the library for compatibility 
  on 32-bit architectures.
+
+Package: libnss-nonlocal-common
+Architecture: all
+Pre-Depends: ${misc:Pre-Depends}, adduser
+Depends: ${misc:Depends}
+Description: nsswitch proxy module to prevent local account spoofing (common package)
+ This nsswitch module acts as a proxy for other nsswitch modules like 
+ hesiod, but prevents non-local users from potentially gaining local 
+ privileges by spoofing local UIDs and GIDs.
+ .
+ This package creates the system users and groups that have special 
+ meanings to nss_nonlocal.

diff --git a/debian/libnss-nonlocal.postrm b/debian/libnss-nonlocal-common.postrm
similarity index 96%
rename from debian/libnss-nonlocal.postrm
rename to debian/libnss-nonlocal-common.postrm
index 88c224f0b22bec4d6e25f03cc0622083417fac9b..9b97214470ffa706762b6b013fc6e6aa19c3746c 100644 (file)
--- a/debian/libnss-nonlocal.postrm
+++ b/debian/libnss-nonlocal-common.postrm
@@ -1,5 +1,5 @@
 #!/bin/sh
-# postrm script for libnss-nonlocal
+# postrm script for libnss-nonlocal-common
 #
 # see: dh_installdeb(1)
 

diff --git a/debian/libnss-nonlocal.preinst b/debian/libnss-nonlocal-common.preinst
similarity index 95%
rename from debian/libnss-nonlocal.preinst
rename to debian/libnss-nonlocal-common.preinst
index d1815fa74e1c452256e9e5339d245bf8da845974..4cb504720e555385809e0411177154a0babed789 100644 (file)
--- a/debian/libnss-nonlocal.preinst
+++ b/debian/libnss-nonlocal-common.preinst
@@ -1,5 +1,5 @@
 #!/bin/sh
-# preinst script for libnss-nonlocal
+# preinst script for libnss-nonlocal-common
 #
 # see: dh_installdeb(1)