[Bug 2076898] Re: Numeric name is accepted as valid username for useradd/groupadd

Hector CAO 2076898 at bugs.launchpad.net
Tue Aug 13 10:14:08 UTC 2024


the bug is a regression introduced when we merge
the debian version 1:4.15.3-3 as part of LP issue 
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/2073338

at this merge, we dropped the patch 506_relaxed_usernames.patch
thinking that the patch has been integrated in debian

but this patch is actually a modified version of the original
patch in Debian to disallow purely numeric user/group names
we must keep this behavior that is Ubuntu-only

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/2076898

Title:
  Numeric name is accepted as valid username for useradd/groupadd

Status in shadow package in Ubuntu:
  In Progress

Bug description:
  Pure numeric names (example 0, 100) should be considered as invalid group and user names
  The command useradd and groupadd must refuse them

  This is not the case in the latest version of shadow :
  1:4.15.3-3ubuntu1

  When we issue:

  $ useradd 0

  The command succeeds instead of failing.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shadow/+bug/2076898/+subscriptions




More information about the foundations-bugs mailing list