Skip to content

nobody/nogroup shouldn't be used #55370

@peterhoeg

Description

@peterhoeg

Issue description

The problem with nobody/nogroup is that people expect them to be nobody while in fact they are somebody named nobody. And that somebody is then shared among all services using it.

Their only legitimate purpose is for NFS.

Here are all the files mentioning either - let's get them knocked off!

  • lib/systems/parse.nix
  • nixos/doc/manual/development/writing-nixos-tests.section.md
  • nixos/doc/manual/from_md/development/writing-nixos-tests.section.xml
  • nixos/doc/manual/from_md/release-notes/rl-1909.section.xml
  • nixos/doc/manual/from_md/release-notes/rl-2111.section.xml
  • nixos/doc/manual/release-notes/rl-1909.section.md
  • nixos/doc/manual/release-notes/rl-2111.section.md
  • nixos/modules/config/users-groups.nix
  • nixos/modules/misc/ids.nix
  • nixos/modules/misc/locate.nix
  • nixos/modules/programs/ccache.nix
  • nixos/modules/programs/mosh.nix
  • nixos/modules/security/google_oslogin.nix
  • nixos/modules/security/tpm2.nix
  • nixos/modules/security/wrappers/default.nix
  • nixos/modules/services/audio/icecast.nix
  • nixos/modules/services/audio/ympd.nix
  • nixos/modules/services/backup/mysql-backup.nix
  • nixos/modules/services/cluster/kubernetes/default.nix
  • nixos/modules/services/development/hoogle.nix
  • nixos/modules/services/hardware/triggerhappy.nix
  • nixos/modules/services/logging/heartbeat.nix
  • nixos/modules/services/mail/freepops.nix
  • nixos/modules/services/mail/mailman.nix
  • nixos/modules/services/mail/opensmtpd.nix
  • nixos/modules/services/mail/postfix.nix
  • nixos/modules/services/misc/cpuminer-cryptonight.nix
  • nixos/modules/services/misc/mwlib.nix
  • nixos/modules/services/misc/sssd.nix
  • nixos/modules/services/misc/tautulli.nix
  • nixos/modules/services/network-filesystems/diod.nix
  • nixos/modules/services/network-filesystems/rsyncd.nix
  • nixos/modules/services/network-filesystems/samba.nix
  • nixos/modules/services/network-filesystems/u9fs.nix
  • nixos/modules/services/network-filesystems/yandex-disk.nix
  • nixos/modules/services/networking/atftpd.nix
  • nixos/modules/services/networking/cjdns.nix
  • nixos/modules/services/networking/dhcpd.nix
  • nixos/modules/services/networking/firewall.nix
  • nixos/modules/services/networking/htpdate.nix
  • nixos/modules/services/networking/hylafax/default.nix
  • nixos/modules/services/networking/ircd-hybrid/ircd.conf
  • nixos/modules/services/networking/nix-serve.nix
  • nixos/modules/services/networking/ntopng.nix
  • nixos/modules/services/networking/ntp/ntpd.nix
  • nixos/modules/services/networking/ocserv.nix
  • nixos/modules/services/networking/oidentd.nix
  • nixos/modules/services/networking/powerdns.nix
  • nixos/modules/services/networking/quicktun.nix
  • nixos/modules/services/networking/rpcbind.nix
  • nixos/modules/services/networking/shadowsocks.nix
  • nixos/modules/services/networking/smokeping.nix
  • nixos/modules/services/networking/ssh/sshd.nix
  • nixos/modules/services/networking/stunnel.nix
  • nixos/modules/services/networking/syncplay.nix
  • nixos/modules/services/networking/unbound.nix
  • nixos/modules/services/networking/xinetd.nix
  • nixos/modules/services/web-apps/mattermost.nix
  • nixos/modules/services/web-servers/jboss/default.nix
  • nixos/modules/services/web-servers/mighttpd2.nix
  • nixos/modules/services/web-servers/shellinabox.nix
  • nixos/modules/services/x11/desktop-managers/cde.nix
  • nixos/modules/services/x11/display-managers/default.nix
  • nixos/modules/tasks/filesystems/nfs.nix
  • nixos/modules/virtualisation/oci-containers.nix
  • nixos/tests/buildbot.nix
  • nixos/tests/gitolite.nix
  • nixos/tests/hardened.nix
  • nixos/tests/shadowsocks/common.nix
  • pkgs/applications/misc/ikiwiki/default.nix
  • pkgs/applications/misc/rofi/default.nix
  • pkgs/applications/networking/sync/rsync/default.nix
  • pkgs/applications/version-management/git-up/default.nix
  • pkgs/applications/video/vlc/default.nix
  • pkgs/applications/virtualization/crosvm/update.py
  • pkgs/build-support/docker/default.nix
  • pkgs/build-support/docker/examples.nix
  • pkgs/build-support/fetchfossil/builder.sh
  • pkgs/development/tools/build-managers/bazel/bazel_0_29/default.nix
  • pkgs/development/tools/build-managers/bazel/bazel_1/default.nix
  • pkgs/development/tools/build-managers/bazel/bazel_3/default.nix
  • pkgs/misc/vim-plugins/overrides.nix
  • pkgs/os-specific/linux/syslinux/default.nix
  • pkgs/servers/http/couchdb/2.0.0.nix
  • pkgs/servers/hylafaxplus/post-patch.sh
  • pkgs/servers/mail/exim/default.nix
  • pkgs/servers/news/leafnode/default.nix
  • pkgs/tools/graphics/povray/default.nix
  • pkgs/tools/misc/moreutils/default.nix

Generated as follows:

grep -E --recursive --files-with-matches -e nobody -e nogroup | sort -u | sed -E -e 's/(.*)/- \[ \] \1/g'

Metadata

Metadata

Assignees

Labels

1.severity: securityIssues which raise a security issue, or PRs that fix one3.skill: sprintableA larger issue which is split into distinct actionable tasks5.scope: trackingLong-lived issue tracking long-term fixes or multiple sub-problems6.topic: nixosIssues or PRs affecting NixOS modules, or package usability issues specific to NixOS

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions