[Pkg-shadow-devel] Bug#1100563: Bug#1100563: should accept --uid/gid between 60000 and 64999 for system users

Chris Hofstaedtler zeha at debian.org
Sun Mar 16 12:42:07 GMT 2025


Control: found -1 passwd/1:4.12.3+dfsg1-1
Control: found -1 passwd/1:4.13+dfsg1-1

Hi Marc,

* Marc Haber <mh+debian-packages at zugschlus.de> [250315 11:30]:
>That's an Oops. 

>This should probably be fixed before trixie.

Well, we shipped bookworm with the warning.

>Debian allocates static UIDs/GIDs for packages in the range between
>60000 and 64999. While this can be requested with adduser --system --uid
>64010, for example, this triggers a warning from useradd:
>
>useradd warning: swift's uid 64010 is greater than SYS_UID_MAX 999
>
>A statically allocated UID reserved for a package qualifies our
>definition of a "system user". useradd should not barf on this.
>
>Adduser has to follow suit and probably adapt to your decision as the
>passwd maintainer. Adduser would really not prefer to throw useradd's
>warnings to /dev/null to silence this. I would appreciate if this
>warning could be suppressed for the static system UID range defined in
>Debian Policy chapter 9.2.2

This all generally makes sense to me.

A bit of codesearch.d.n-ing showed me some problematic code, which 
tries to determine if a user is a "system account", by checking if 
they are in the range SYS_UID_MIN..SYS_UID_MAX. C'est la vie.

Chris



More information about the Pkg-shadow-devel mailing list