Le 08/02/2020 à 18:52, Samuel Sieb a écrit :
> On 2/8/20 9:24 AM, François Patte wrote:
>> What I am now wondering is: why this package created an user when I
>> installed it and did not removed this user when I removed the package?
>
> I don't think any of them do that. Removing a package doesn't remove
> any data created by it, so you will want the ownership to still be
> there. Also, sometimes there are multiple packages using the same user.
So, why an installation script does not run rkhunter --propupd after the
installation (if it detects that rkhunter is on board) in order to take
care of owner's computer nerves?
rkhunter is not the only tool that tracks such changes, and some sites
have ad-hoc systems to track users and usage stats. A packager
can't predict what side effects could occur from adding (or
removing) a user. Ideally, anyone who uses a package should
know if it creates a user, but often such information isn't passed on
to sys. admins with the request to install a package.