[Openstack-devel] Bug#732387: Adds user ceilometer to group nova and libvirt on every upgrade

[Gaudenz Steinlin]

Package: ceilometer-common
Version: 2013.2.1-1
Severity: serious

The ceilometer postinst scripts runs the following commands
unconditionally on "configure" and even "reconfigure":

adduser ceilometer nova || true
adduser ceilometer libvirt || true

In the common case this is just annoying as the postinst prints

The user `ceilometer' is already a member of `nova'.
The user `ceilometer' is already a member of `libvirt'.

during upgrades.

But this is actually not respecting local admin configurations. If an
administrator decides (for whatever reason) that the ceilometer user
should not be part of these groups, this decision is reverted on every
package upgrade. This violates Debian Policy section 10.7.3 which states
that local modifications must be preserved.

The user should only be added to these groups on first install. On
upgrades the group membership should not be changed.

Gaudenz

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (800, 'testing'), (700, 'unstable'), (50, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.11-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_CH.UTF-8, LC_CTYPE=de_CH.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash