Skip to content

avoid creating several GB worth of sparse lastlog and faillog files for users with high uid values

Johannes Schauer Marin Rodrigues requested to merge josch/shadow:lastlog into master

@donkult created https://github.com/shadow-maint/shadow/pull/558 against shadow upstream which got merged into master with https://github.com/shadow-maint/shadow/commit/ebf9b232b012725d2be5e750876c7336cf1c37fd -- this MR backports this patch from upstream master to the Debian packaging. From debian/patches/README.patches I understand that patches that were already included upstream are to be prefixed with 3xx_ in their filename?

This change is useful because otherwise shadow will potentially create several hundred (!!) GB worth of sparse files for users with high user id values. To prevent this, people have started calling useradd with --no-log-init. This has even made it into the docker best practices: https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#user

Lets prevent this madness as quickly as possible by cherry-picking this patch from shadow upstream git master.

Closes: #1019245

Edited by Johannes Schauer Marin Rodrigues

Merge request reports

Loading