Advisories ยป MGAA-2018-0049

Updated libuser packages fix bugs if home directory exists when creating a new user

Publication date: 14 Mar 2018
Modification date: 14 Mar 2018
Type: bugfix
Affected Mageia releases : 6

Description

Updated libuser and userdrake packages fix bugs.

When creating a new user with userdrake, if a directory matching the name
supplied for the new user already exists userdrake will segfault leaving the new 
user created but without a home directory or mail spool. This patch fixes that 
by preserving the existing directory by re-naming it (appending text identifying 
it as a duplicate along with a date and time) if the user chooses to do so, and 
then proceeding to create the new home directory in the usual manner and 
avoiding the segfault. Ownership on the duplicate directory is also changed to 
root.root thus reserving the handling of security implications for an admin. 
This allows the new user to log in with a new, clean home directory while 
preserving the contents of the old directory in case data needs to be migrated. 
The user is also allowed to choose to not do anything with the existing 
directory and make different choices in how the new user account is created if 
they desire.

References

SRPMS

6/core