Upgrading avoididing the 3.5.16 Default user group assignment changed

English Install/Boot/Login
1

about the new default user group assignement:
reding this

3.5.16 Default user group assignment changed #

  • File Name: /github/workspace/build/.profiled/noprofile/
  • ID: bsc-1240989

Previously, all user accounts belonged to a single users group.

Now instead of being added to the common users group, each new user now gets their own primary group matching their username. This is due to USERGROUPS_ENAB being enabled in /usr/etc/login.defs. This change affects all new installations and upgraded systems that did not change the default /etc/login.defs. This has several consequences:

  • files created by new users are not group-readable by default
  • configurations that used the primary users group as a condition do not work anymore
  • configurations that used the primary or secondary users group as a condition need to have the users group manually added to these user accounts in order to continue to work, for example, to for @users in the sudoers file
  • home directories inherited from a previous system need to standardize the GID of the files by running: find "$HOME" -group users -exec chgrp myuser {} \;, or chgrp -R myuser "$HOME" if you did not use any GID other than users

I have and I would like the old behaviour where group permission allow to
read write the files to the users of the group, so if I upgrade my 15.6 at what point I have to disable USERGROUPS_ENABin /usr/etc/login.defs???
and in my 15.6 is not present /usr/etc/login.defs, have I to create it?
is there another way to have the previous behaviour of files permission??

2

I assume you can still create users as you want them. Grouping them to your needs. I e.g. had never used users as the primary group for my users and will continue to do so.

3

for example how can I avoid this?
and have group readable new created files by default?

4

and this, when I upgrade?

5

You set UMASK. Read man login.defs.

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.