[Bug 1990488] [NEW] Group sgx is not part of reserved-usernames

[Olivier Gayot]

Public bug reported:

The current version of udev.postinst in Ubuntu creates four system
groups:

 * kvm
 * input
 * render
 * sgx

kvm, input and render were added to reserved-usernames when user-setup
1.83 was released. sgx however, was added to udev.postinst later with
systemd 248-1 so it did not make it to reserved-usernames at the time.

Subiquity relies on reserved-usernames to restrict the scope of accepted
usernames ; and using sgx as a username will lead to a system with no
user created.

** Affects: user-setup (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: user-setup (Debian)
     Importance: Unknown
         Status: Unknown

** Description changed:

  The current version of udev.postinst in Ubuntu creates four system
  groups:
  
-  * kvm
-  * input
-  * render
-  * sgx
+  * kvm
+  * input
+  * render
+  * sgx
  
  kvm, input and render were added to reserved-usernames when user-setup
  1.83 was released. sgx however, was added to udev.postinst later with
  systemd 248-1 so it did not make it to reserved-usernames at the time.
+ 
+ Subiquity relies on reserved-usernames to restrict the scope of accepted
+ usernames ; and using sgx as a username will lead to a system with no
+ user created.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to user-setup in Ubuntu.
https://bugs.launchpad.net/bugs/1990488

Title:
  Group sgx is not part of reserved-usernames

Status in user-setup package in Ubuntu:
  New
Status in user-setup package in Debian:
  Unknown

Bug description:
  The current version of udev.postinst in Ubuntu creates four system
  groups:

   * kvm
   * input
   * render
   * sgx

  kvm, input and render were added to reserved-usernames when user-setup
  1.83 was released. sgx however, was added to udev.postinst later with
  systemd 248-1 so it did not make it to reserved-usernames at the time.

  Subiquity relies on reserved-usernames to restrict the scope of
  accepted usernames ; and using sgx as a username will lead to a system
  with no user created.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/user-setup/+bug/1990488/+subscriptions