Turned out that dropping tmpfiles/legacy.conf was not intended by
systemd upstream, even after dropping support for SysVInit. This has
been addressed in [GH#35278][0].

Let's update the comment to match the situation, but keep the actual
directive in place - just to be safe.

[0]: https://github.com/systemd/systemd/pull/35278

Apply various changes:
- unset globsort in `/etc/profile` for bash>=5.3
- use `C.UTF-8` as default for LANG
- create `/run/lock` using tmpfiles.d (moved from systemd package)
- use `PRETTY_NAME` variable in `/etc/issue` to display distribution name

GreyXor GreyXor authored 6 months ago and David Runge committed 4 months ago

refactor: direct use pretty name in issue file

The C locale does not support unicode. Use the C.UTF-8 locale instead.
C.UTF-8 is included in the glibc package so it should always be available on the system.

unset GLOBSORT as part of upcoming bash 5.3 release. Quotation from Kerin Millar:"As such, I recommend that "unset -v GLOBSORT" be unconditionally issued before any sourcing occurs. Quotation from To do so would serve as a sensible safety measure, covering the case where the GLOBSORT variable has been adjusted - whether intentionally or not - only for /etc/profile to be sourced anew. The rationale is that the user should always be able to expect that the snippets be processed in a deterministic order"

Allow more easily to find out why these settings are changed from
defaults.

Use consistent style with `=` surrounded by spaces.

Alphabetically sorted arrays with one entry per line are easier to read.
Furthermore, git commits changing the files are easier to read as well.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Robin Candau authored 11 months ago and David Runge committed 11 months ago

See detailed discussion around the reasons for this change:
https://lists.archlinux.org/archives/list/arch-dev-public@lists.archlinux.org/thread/5GU7ZUFI25T2IRXIQ62YYERQKIPE3U6E/

To streamline file installation, use an associative array to declare
targets, source file, mode, user and group owner.

Be verbose about the installation of files.

Add usr/share/factory/etc/profile.d/locale.sh, so that etc/ profile.d/
locale.sh can be replaced by a factory file in case /etc is deleted.
Extend tmpfiles.d setup for etc/profile.d/locale.sh.

Add /etc/arch-release as file (also to factory), as it is seemingly
still used by legacy OS detection methods (looking at you cmake).

Signed-off-by: David Runge <dvzrv@archlinux.org>

Add a local associative array to unify the data representation of the
installed directories, their mode, user and group ownerships.
Add a local associative array to streamline the representation of
symlinks names and their targets.

Be verbose about directory and symlink creation.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Release various new changes:
- Add additional ld.so.conf dir with /usr/lib/ld.so.conf.d/
- Update root's shell to /usr/bin/bash
- Update BUG_REPORT_URL to new GitLab location

Update maintainer info.

nl6720 authored 1 year ago and David Runge committed 1 year ago

The bug tracker moved from Flyspray to GitLab.

See https://lists.archlinux.org/hyperkitty/list/arch-dev-public@lists.archlinux.org/thread/WYXDTJ3TR2DWRQCDZK44BQDH67IDVGTS/

Match the SHELL value in /etc/default/useradd.

Related to shadow@16ecf814

Vicki Pfau authored 1 year ago and Daurnimator committed 1 year ago

Closes #6

Add valid locations in /usr/bin to shells: https://bugs.archlinux.org/task/33677
Remove custom umask setting from /etc/profile: https://bugs.archlinux.org/task/66068

Set architecture to 'any' as we are not shipping architecture-specific files in this package.
Set license to GPL-3.0-or-later to align with https://terms.archlinux.org/docs/terms-of-service/#_contribution_licenses

As we want to centralize the umask setting via `UMASK` and `HOME_MODE`
in /etc/login.defs, we rely on pam_umask.so and no longer need a custom
umask setting in /etc/profile.
https://bugs.archlinux.org/task/66068



Signed-off-by: David Runge <dvzrv@archlinux.org>

- add /etc/subuid and /etc/subgid files (FS#68741)

- use systemd recommended settings for /etc/nsswitch.conf

- implement FS#72870

- make append_path function available to profile.d scripts (see FS#66338)

This will prevent root login with an empty password on a fresh Arch Linux
installation.

This is only about the default behaviour, you could restore the previous one by
running `passwd -d root'.
Please note, this is not recommended and behave inconsistenly between
applications.

We use a trick in the shadow file to set a default password which never allow
login by using this password.

The special value '*' is used in the shadow file.
We don't use '!', '!!', '!*' on purpose.
The special '!' char, which should mean password locked (and not account locked)
is interpreted by some applications (e.g. sshd) as an account locked and will
prevent root login.

This change was suggested by Lennart Poettering and Zbigniew Jedrzejewski-Szmek
to security@archlinux.org.

- fix FS#66499