diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml
index a67fe7d7a..23f0bef6e 100644
--- a/chapter01/changelog.xml
+++ b/chapter01/changelog.xml
@@ -40,6 +40,16 @@
appropriate for the entry or if needed the entire day's listitem.
-->
+
+ 2022-05-01
+
+
+ [bdubbs] - Update to openssl-3.0.3. Fixes
+ #5057.
+
+
+
+
2022-05-01
diff --git a/chapter07/createfiles.xml b/chapter07/createfiles.xml
index 7df2acde6..eda30ed2e 100644
--- a/chapter07/createfiles.xml
+++ b/chapter07/createfiles.xml
@@ -116,8 +116,8 @@ mail:x:34:
kvm:x:61:
uuidd:x:80:
wheel:x:97:
-nogroup:x:65534:
-users:x:999:
+users:x:999:
+nogroup:x:65534:
EOF
cat > /etc/group << "EOF"
@@ -153,8 +153,8 @@ systemd-coredump:x:79:
uuidd:x:80:
systemd-oom:x:81:
wheel:x:97:
-nogroup:x:65534:
-users:x:999:
+users:x:999:
+nogroup:x:65534:
EOF
The created groups are not part of any standard—they are groups
@@ -165,9 +165,23 @@ EOF
url="http://refspecs.linuxfoundation.org/lsb.shtml"/>) only recommends that,
besides the group root with a
Group ID (GID) of 0, a group bin
- with a GID of 1 be present. All other group names and GIDs can be chosen
- freely by the system administrator since well-written programs do not depend
- on GID numbers, but rather use the group's name.
+ with a GID of 1 be present. The GID of 5 is widely used for
+ tty group, and the number 5 is
+ also used in systemd
+ /etc/fstab for the
+ devpts filesystem.
+ All other group names and GIDs can be chosen freely by the system
+ administrator since well-written programs do not depend on GID numbers,
+ but rather use the group's name.
+
+ The ID 65534 is used by the kernel for NFS and separate user
+ namespaces for unmapped users and groups (those exist on the NFS server
+ or the parent user namespace, but do not exist
on the local
+ machine or in the separate namespace). We assign
+ nobody and
+ nogroup for it to avoid an
+ unnamed ID. But other distros may treat this ID differently, so any
+ portable program should not depend on this assignment.
Some tests in need a regular
user. We add this user here and delete this account at the end of that