[Pkg-shadow-devel] Length of user names with regard to encoding.

Chris Hofstaedtler zeha at debian.org
Fri Nov 15 10:52:23 GMT 2024


* Marc Haber <mh+pkg-shadow-devel at zugschlus.de> [241115 09:19]:
> On Thu, Nov 14, 2024 at 08:53:41PM +0100, Chris Hofstaedtler wrote:
> > * Marc Haber <mh+pkg-shadow-devel at zugschlus.de> [241110 13:33]:
> > > However, during debugging and improving UTF-8-support, I have found out
> > > that an account named ффффффффффффффффф _CAN_ be created and seems to
> > > happily work.
> > 
> > I'm wondering if this working is an accident. The code in src:shadow
> > might be utf-8 clean, but maybe not "intentionally". Upstream has
> > some open PRs to generally improve string handling.
> 
> Do those PRs go in the direction of being more permissive or more
> restrictive?

Towards "more correct"; I don't think they are changing what is
being permissible. But if there were edge cases (bugs), they'll
hopefully go away.

> > Sorry for not being able to say anything useful.
> 
> Everything helps. In the mean time, I am working on
> https://wiki.debian.org/UserAccounts to find some consensus and to have
> a single place of "truth" regarding user accounts.

Thanks for working on that!

Chris




More information about the Pkg-shadow-devel mailing list