Commit graph

2 commits

Author SHA1 Message Date
Colin Walters
8895ec92a2 Move kvm to /etc/group
Per https://issues.redhat.com/browse/RHEL-115278

Longer term of course we want to hard require systemd-sysusers
for this one instead.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-10-17 09:42:07 -04:00
Colin Walters
993845d2a2 Move the tss group to /etc so it can be mutated
This works around two issues:

- First, rpm switched to reading users/groups directly for
  its implementation of systemd-sysusers, which meant
  it no longer reads via nss, which breaks nss-altfiles.
  xref: https://github.com/rpm-software-management/rpm/pull/2503#issuecomment-1536435351
  and below.
- Second, even if that was fixed, `keylime` wants to add
  its user to the group, which can't be done when it's a system
  uid.

Since nothing in the OS content is owned by this group, we can
move underneath `/etc` by default.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-03-25 20:09:17 -04:00