yast2-users modifies UIDs/GIDs, which is not consistent with installed ownership from RPM
This document (7017384) is provided subject to the disclaimer at the end of this document.
Environment
Situation
openslp:x:494:2:openslp daemon:/var/lib/empty:/sbin/nologin
polkitd:x:494:491:User for polkitd:/var/lib/polkit:/sbin/nologin
When the profile from a SLED 12 system is used, there are even more duplicates. It affects functionality of multiple system components, e.g. snapper:
test:~ # snapper listDbus-daemon has group id of polkit (incorrect):
Failure (org.freedesktop.DBus.Error.Spawn.ExecFailed).
test:~ # ps -eo pid,uid,args| grep dbus-daemon
833 499 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
test:~ # id 499
uid=499(messagebus) gid=499(brlapi) groups=499(brlapi)
test:~ # ll /lib/dbus-1/dbus-daemon-launch-helper
-rwsr-x--- 1 root polkitd 294560 Mar 3 2015 /lib/dbus-1/dbus-daemon-launch-helper
Resolution
yast2-users-3.1.40-1.3.10379.0.PTF.965852.x86_64.rpmUse this package during installation. The package will be released soon as a maintenance update.
A mass PTF can be found here
To use the package during installation the boot option 'dud' must be used. For network based installation the complete options set will look like:
boot/sled/linux initrd=boot/sled/initrd install=http://install.site/inst/sled/ ramdisk_size=65535 vga=791 barrier=off autoyast=http://install.site/sled.xml dud=http://install.site/yast2-users.rpm
Make sure that profile used is generated on a working system using 'yast2 clone_system' after installation.
Cause
Package 'yast-users' distributed on the installation media of SUSE Enterprise Desktop 12 SP1 is reading users from media and merging them with the profile.
Fixed version avoids reading of such users. Also, and only during installation, users are matched by username to avoid UID/GID duplication.
Additional Information
Disclaimer
This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:7017384
- Creation Date: 18-Mar-2016
- Modified Date:03-Mar-2020
-
- SUSE Linux Enterprise Desktop
For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com