adduser race conditions

Brent W. Baccala cosine at freesoft.org
Wed Feb 17 02:30:44 UTC 2021


Hi -

I've found at least one race condition in the adduser script on Ubuntu 18.

The program searches for an available UID (and GID), then adds the new user
with the selected UID/GID numbers without any synchronization, so two
near-simultaneous invocations of the program can produce two users with
identical GIDs (what I saw), or, presumably, identical UIDs.

Is there a bug/issue tracker somewhere for this program?

    agape
    brent
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20210216/0f8c11ab/attachment.html>


More information about the Ubuntu-devel-discuss mailing list