From owner-freebsd-hackers@FreeBSD.ORG Tue Jun 28 20:49:59 2011 Return-Path: Delivered-To: hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5AECC106566B for ; Tue, 28 Jun 2011 20:49:59 +0000 (UTC) (envelope-from glewis@eyesbeyond.com) Received: from misty.eyesbeyond.com (gerbercreations.com [71.39.140.16]) by mx1.freebsd.org (Postfix) with ESMTP id 159478FC13 for ; Tue, 28 Jun 2011 20:49:58 +0000 (UTC) Received: from misty.eyesbeyond.com (localhost.eyesbeyond.com [127.0.0.1]) by misty.eyesbeyond.com (8.14.4/8.14.4) with ESMTP id p5SKVSZZ039062; Tue, 28 Jun 2011 13:31:28 -0700 (PDT) (envelope-from glewis@eyesbeyond.com) Received: (from glewis@localhost) by misty.eyesbeyond.com (8.14.4/8.14.4/Submit) id p5SKVRHL039061; Tue, 28 Jun 2011 13:31:27 -0700 (PDT) (envelope-from glewis@eyesbeyond.com) X-Authentication-Warning: misty.eyesbeyond.com: glewis set sender to glewis@eyesbeyond.com using -f Date: Tue, 28 Jun 2011 13:31:27 -0700 From: Greg Lewis To: Chris Rees Message-ID: <20110628203127.GA39023@misty.eyesbeyond.com> References: <20110628165911.GC44024@dan.emsphone.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Cc: hackers@freebsd.org, Dan Nelson Subject: Re: Default value for UIDs X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jun 2011 20:49:59 -0000 On Tue, Jun 28, 2011 at 09:11:54PM +0100, Chris Rees wrote: > On 28 June 2011 20:57, Chris Rees wrote: > > On 28 June 2011 20:50, jhell wrote: > >> On Tue, Jun 28, 2011 at 06:30:23PM +0100, Chris Rees wrote: > >>> On 28 June 2011 17:59, Dan Nelson wrote: > >>> > In the last episode (Jun 28), Chris Rees said: > >>> >> Hi all, > >>> >> > >>> >> [crees@zeus]~% tail -n 2 /usr/ports/UIDs > >>> >> dbxml:*:949:949::0:0:dbXML user:/nonexistent:/sbin/nologin > >>> >> nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin > >>> >> [crees@zeus]~% grep crees /etc/passwd > >>> >> crees:*:1001:1001:Chris Rees:/home/crees:/bin/tcsh > >>> >> chris:*:1001:1001:Chris Rees:/home/crees:/bin/tcsh > >>> >> [crees@zeus]~% > >>> >> > >>> >> I'm a little concerned at how close the ports UIDs are getting to the > >>> >> username space... > >>> > > >>> > There are only 216 entries in UIDs, though, so if people are just using > >>> > "last entry + 1" when adding new ones, they should probably start filling > >>> > the gaps instead. ?The 100s and 200s are pretty dense, but 350-399 only has > >>> > 5 entries, 400-499 has 4, 600-699 has 7, 700-799 has 3, etc. > >>> > > >>> > >>> Thank you for pointing that out (d'oh). > >>> > >>> However, perhaps we could still address the *potential* problems. To > >>> use one example, Debian has (as long as I can remember) used 10001 for > >>> the first username. When we have 65535 - 99 UIDs to play with, > >>> expansion like this isn't a problem. > >>> > >>> Could it be worth it? Think of ten years down the line. > >>> > >> > >> Best part would be to find every port that doesnt need a statically > >> allocated UID/GID and just dynamically allocate them after a certain > >> range '30000-50000' or whatever for ~20,000 ports and divide that > >> namespace up by category. > >> > >> > >> dbxml really does it really need to be static ? it just needs to run. > >> > >> Also: (stable/8) /usr/ports/UIDs > >> dbxml:*:945:945::0:0:& user:/nonexistent:/sbin/nologin > >> dbxml:*:949:949::0:0:dbXML user:/nonexistent:/sbin/nologin > >> > >> Which one of these are we planning on actually using here ? > >> > > > > Interesting... glewis added the second one. > > > > Greg, what did the pointyhat say? > > > > http://www.freebsd.org/cgi/cvsweb.cgi/ports/UIDs.diff?r1=1.156;r2=1.155;f=h > > > > > Mystery solved. > > http://www.freebsd.org/cgi/cvsweb.cgi/ports/UIDs Yep, I forgot to commit my UIDs, GIDs changes with the update to dbXML, got the pointyhat email and then merged and committed without paying enough attention. Sorry about that. Thanks for removing the extra definition! -- Greg Lewis Email : glewis@eyesbeyond.com Eyes Beyond Web : http://www.eyesbeyond.com Information Technology FreeBSD : glewis@FreeBSD.org