debian/control: add adduser to Depends of cephadm and ceph-common

in `debian/ceph-common.postinst` and `debian/cephadm.postinst`, we
use `adduser --system` to create the system user when configuring
the corresponding package.

before this change, the dependency is not listed in the runtime
`Depends` section of ceph-common and cephadm.

in this change, the dependency is added. this is also suggested
by Securing Debian Manual, see
https://www.debian.org/doc/manuals/securing-debian-manual/bpp-lower-privs.en.html

Signed-off-by: Kefu Chai <tchaikov@gmail.com>
This commit is contained in:
Kefu Chai 2024-01-17 23:09:02 +08:00
parent 4103b566e4
commit 2a30ddccd0
1 changed files with 4 additions and 2 deletions

6
debian/control vendored
View File

@ -184,7 +184,8 @@ Description: debugging symbols for ceph-base
Package: cephadm
Architecture: linux-any
Recommends: podman (>= 2.0.2) | docker.io | docker-ce
Depends: lvm2,
Depends: adduser (>= 3.11),
lvm2,
python3,
${python3:Depends},
Description: cephadm utility to bootstrap ceph daemons with systemd and containers
@ -610,7 +611,8 @@ Description: debugging symbols for rbd-nbd
Package: ceph-common
Architecture: linux-any
Depends: librbd1 (= ${binary:Version}),
Depends: adduser (>= 3.11),
librbd1 (= ${binary:Version}),
python3-cephfs (= ${binary:Version}),
python3-ceph-argparse (= ${binary:Version}),
python3-ceph-common (= ${binary:Version}),