[Bug 2076898] Re: Numeric name is accepted as valid username for useradd/groupadd
Hector CAO
2076898 at bugs.launchpad.net
Tue Aug 13 10:14:08 UTC 2024
the bug is a regression introduced when we merge
the debian version 1:4.15.3-3 as part of LP issue
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/2073338
at this merge, we dropped the patch 506_relaxed_usernames.patch
thinking that the patch has been integrated in debian
but this patch is actually a modified version of the original
patch in Debian to disallow purely numeric user/group names
we must keep this behavior that is Ubuntu-only
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/2076898
Title:
Numeric name is accepted as valid username for useradd/groupadd
Status in shadow package in Ubuntu:
In Progress
Bug description:
Pure numeric names (example 0, 100) should be considered as invalid group and user names
The command useradd and groupadd must refuse them
This is not the case in the latest version of shadow :
1:4.15.3-3ubuntu1
When we issue:
$ useradd 0
The command succeeds instead of failing.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/2076898/+subscriptions
More information about the foundations-bugs
mailing list