Arch Linux

gurkan

Member

Registered: 2016-02-01

Posts: 28

Groups added without my knowledge

Hi!

Im always running a Rkhunter scan before I update my Arch, and Rkhunter throws me some warnings now that I cant figure out about the groups/users.

[23:52:54]   Checking for passwd file changes                [ Warning ]
[23:52:54] Warning: User 'colord' has been added to the passwd file.
[23:52:54]
[23:52:54] Info: Starting test name 'group_changes'
[23:52:54]   Checking for group file changes                 [ Warning ]
[23:52:54] Warning: Changes found in the group file for group 'video':
[23:52:54]          User 'sddm' has been added to the group
[23:52:54] Warning: Group 'render' has been added to the group file.
[23:52:54] Warning: Group 'colord' has been added to the group file.
[23:52:54]   Checking root account shell history files       [ OK ]

I figured out that user "sddm" probably was added when I updated my DE (Lxqt)
But I cant figure out why the groups "render" and "colord" was added? Likewise with the user "colord".

Does anyone knows what it is or what I should do to clarify?

Thanks in advance

archimboldo

Member

Registered: 2016-03-07

Posts: 232

Re: Groups added without my knowledge

https://www.archlinux.org/packages/extr … ers/files/

---

Rules for problems.
Everyone has problems. Animals have problems. And buildings. And cats, and trees.
Problems are your friends. Treat them well.

gurkan

Member

Registered: 2016-02-01

Posts: 28

Re: Groups added without my knowledge

https://www.archlinux.org/packages/extr … ers/files/

For a noob, can you explain what the list is about exactly?

I can find "colord" in the list, but not the "render"

loqs

Member

Registered: 2014-03-06

Posts: 19,113

Re: Groups added without my knowledge

/usr/lib/sysusers.d/basic.conf

Edit:
https://github.com/systemd/systemd/comm … 1862d8b8b2

Last edited by loqs (2018-02-16 17:09:53)

gurkan

Member

Registered: 2016-02-01

Posts: 28

Re: Groups added without my knowledge

/usr/lib/sysusers.d/basic.conf

Edit:
https://github.com/systemd/systemd/comm … 1862d8b8b2

Alright, Im getting closer to understand, maybe. But why are they in "sysusers" and who/what added them? Still I cant find "render".

loqs

Member

Registered: 2014-03-06

Posts: 19,113

Re: Groups added without my knowledge

See the commit message at the top of the link I provided and at the bottom of the commit the diff for sysusers.d/basic.conf.in.
See also  `man sysusers.d` and the contents of /usr/share/libalpm/hooks/systemd-sysusers.hook
Edit:
Pacman#Querying_package_databases covers finding which package if any a file belongs to.

Last edited by loqs (2018-02-16 17:22:41)

gurkan

Member

Registered: 2016-02-01

Posts: 28

Re: Groups added without my knowledge

See the commit message at the top of the link I provided and at the bottom of the commit the diff for sysusers.d/basic.conf.in.
See also  `man sysusers.d` and the contents of /usr/share/libalpm/hooks/systemd-sysusers.hook
Edit:
Pacman#Querying_package_databases covers finding which package if any a file belongs to.

Ah now I see, the group is changeing name from "video" to "render".

And colord is used by programs like firefox, pavucontrol and so on through gtk3.

Now I think I get it . Thanks!

EDIT: But actually, who would it need to create a group now but not earlier?

Last edited by gurkan (2018-02-16 17:39:29)

loqs

Member

Registered: 2014-03-06

Posts: 19,113

Re: Groups added without my knowledge

From the commit message

Remove the uaccess tag from /dev/dri/renderD*.

uaccess allows access to that device for user sessions tracked by systemd.  Systemd switched from that access method to only users in the render group.