[Pkg-shadow-devel] Bug#923478: initscripts use unsafe `: >` shell command to create files

[Dmitry Bogatov]

[2019-04-26 13:17] Chris Hofstaedtler <zeha at debian.org>
> > According my experiments, it will. Even if I remove this code, something
> > (login/getty, maybe?) still creates /var/run/utmp, root:root.
>
> Which init was used in your experiments?

sysvinit-core.

> If it was systemd or anything else honoring tmpfiles.d,
> /lib/tmpfiles.d/systemd.conf has:
>
> F! /run/utmp 0664 root utmp -

sysvinit-core does not read tmpfiles.d

> > Thus I am asking your advice, whether it is safe to not create
> > /var/run/utmp in initscripts.
>
> Depending on the init, removing initscripts is already allowed, and
> it's likely that fresh installs do not even get it installed
> anymore.

True. But, as you mentioned, systemd uses its own way of creating this
file.
-- 
        Note, that I send and fetch email in batch, once every 24 hours.
                 If matter is urgent, try https://t.me/kaction
                                                                             --