[Rpm-maint] [rpm-software-management/rpm] [regression?] rpm 4.17 can't find group declared inside sceleton package (#1789)

[Florian Festi]

This is caused by RPM no longer using the user and group information from out side of the change root. Earlier versions were not properly using the inside files in all cases.

The uid and gid of these files are set before they are moved in place. So the shadow group does not exist yet. While this may have worked previously by using the gui from the installing system this is only working "by accident" as the system likely used the same gid. But if the installation was being run from a system with a different gui for `shadow` the file would end up with the wrong group - which is may be a security concern.

I did not find more information on this change but f9c7b53f50adc129baee809692d4c80b3bd15432 looks like it would have that effect. May be @pmatilai has some pointers.

`chgrp` in the `%post` scriptlet should do the trick - although I admit it is not a great solution


So I'd say this is an intentional behaviour change.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1789#issuecomment-932064312
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211001/a0564c89/attachment.html>