From 2a30ddccd04b204821f0496856847e8ffc07835d Mon Sep 17 00:00:00 2001 From: Kefu Chai Date: Wed, 17 Jan 2024 23:09:02 +0800 Subject: [PATCH] debian/control: add adduser to Depends of cephadm and ceph-common in `debian/ceph-common.postinst` and `debian/cephadm.postinst`, we use `adduser --system` to create the system user when configuring the corresponding package. before this change, the dependency is not listed in the runtime `Depends` section of ceph-common and cephadm. in this change, the dependency is added. this is also suggested by Securing Debian Manual, see https://www.debian.org/doc/manuals/securing-debian-manual/bpp-lower-privs.en.html Signed-off-by: Kefu Chai --- debian/control | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/debian/control b/debian/control index b4967b398f4..98e76fceba8 100644 --- a/debian/control +++ b/debian/control @@ -184,7 +184,8 @@ Description: debugging symbols for ceph-base Package: cephadm Architecture: linux-any Recommends: podman (>= 2.0.2) | docker.io | docker-ce -Depends: lvm2, +Depends: adduser (>= 3.11), + lvm2, python3, ${python3:Depends}, Description: cephadm utility to bootstrap ceph daemons with systemd and containers @@ -610,7 +611,8 @@ Description: debugging symbols for rbd-nbd Package: ceph-common Architecture: linux-any -Depends: librbd1 (= ${binary:Version}), +Depends: adduser (>= 3.11), + librbd1 (= ${binary:Version}), python3-cephfs (= ${binary:Version}), python3-ceph-argparse (= ${binary:Version}), python3-ceph-common (= ${binary:Version}),