diff --git a/chapter01/changelog.xml b/chapter01/changelog.xml index a67fe7d7a..23f0bef6e 100644 --- a/chapter01/changelog.xml +++ b/chapter01/changelog.xml @@ -40,6 +40,16 @@ appropriate for the entry or if needed the entire day's listitem. --> + + 2022-05-01 + + + [bdubbs] - Update to openssl-3.0.3. Fixes + #5057. + + + + 2022-05-01 diff --git a/chapter07/createfiles.xml b/chapter07/createfiles.xml index 7df2acde6..eda30ed2e 100644 --- a/chapter07/createfiles.xml +++ b/chapter07/createfiles.xml @@ -116,8 +116,8 @@ mail:x:34: kvm:x:61: uuidd:x:80: wheel:x:97: -nogroup:x:65534: -users:x:999: +users:x:999: +nogroup:x:65534: EOF cat > /etc/group << "EOF" @@ -153,8 +153,8 @@ systemd-coredump:x:79: uuidd:x:80: systemd-oom:x:81: wheel:x:97: -nogroup:x:65534: -users:x:999: +users:x:999: +nogroup:x:65534: EOF The created groups are not part of any standard—they are groups @@ -165,9 +165,23 @@ EOF url="http://refspecs.linuxfoundation.org/lsb.shtml"/>) only recommends that, besides the group root with a Group ID (GID) of 0, a group bin - with a GID of 1 be present. All other group names and GIDs can be chosen - freely by the system administrator since well-written programs do not depend - on GID numbers, but rather use the group's name. + with a GID of 1 be present. The GID of 5 is widely used for + tty group, and the number 5 is + also used in systemd + /etc/fstab for the + devpts filesystem. + All other group names and GIDs can be chosen freely by the system + administrator since well-written programs do not depend on GID numbers, + but rather use the group's name. + + The ID 65534 is used by the kernel for NFS and separate user + namespaces for unmapped users and groups (those exist on the NFS server + or the parent user namespace, but do not exist on the local + machine or in the separate namespace). We assign + nobody and + nogroup for it to avoid an + unnamed ID. But other distros may treat this ID differently, so any + portable program should not depend on this assignment. Some tests in need a regular user. We add this user here and delete this account at the end of that