GNU bug report logs - #53743
Using spaces in names doesn't have complete sanitization

Previous Next

Package: guix;

Reported by: Tsarina Baelarina Nina <bills.jared <at> outlook.com>

Date: Thu, 3 Feb 2022 06:51:02 UTC

Severity: normal

To reply to this bug, email your comments to 53743 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-guix <at> gnu.org:
bug#53743; Package guix. (Thu, 03 Feb 2022 06:51:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Tsarina Baelarina Nina <bills.jared <at> outlook.com>:
New bug report received and forwarded. Copy sent to bug-guix <at> gnu.org. (Thu, 03 Feb 2022 06:51:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Tsarina Baelarina Nina <bills.jared <at> outlook.com>
To: bug-guix <at> gnu.org
Subject: Using spaces in names doesn't have complete sanitization
Date: Wed, 02 Feb 2022 20:49:49 -0800
[Message part 1 (text/plain, inline)]
I put my name as Tsarina Baelarina Nina, as opposed to my real name. It 
created the correct home profile, but also included the two extra empty 
directories in my home directory as included in the attachment for 
proof. I think I remember reading something about camel casing for user 
names on the system, as in the name can't start with a capital letter, 
but I thought you could get away with spaces if you escaped the strings 
properly \(space).

[Message part 2 (text/html, inline)]
[Screenshot from 2022-02-02 20-39-05.png (image/png, attachment)]

Information forwarded to bug-guix <at> gnu.org:
bug#53743; Package guix. (Thu, 03 Feb 2022 18:33:02 GMT) Full text and rfc822 format available.

Message #8 received at 53743 <at> debbugs.gnu.org (full text, mbox):

From: Maxime Devos <maximedevos <at> telenet.be>
To: Tsarina Baelarina Nina <bills.jared <at> outlook.com>, 53743 <at> debbugs.gnu.org
Subject: Re: bug#53743: Using spaces in names doesn't have complete
 sanitization
Date: Thu, 03 Feb 2022 18:32:51 +0000
[Message part 1 (text/plain, inline)]
Tsarina Baelarina Nina schreef op wo 02-02-2022 om 20:49 [-0800]:
> I put my name as Tsarina Baelarina Nina, as opposed to my real name.
> It created the correct home profile, but also included the two extra
> empty directories in my home directory as included in the attachment
> for proof. I think I remember reading something about camel casing
> for user names on the system, as in the name can't start with a
> capital letter, but I thought you could get away with spaces if you
> escaped the strings properly \(space).

I can reproduce with the attached configuration.
I'm wondering what software is creating these 'Baelarina' and 'Nina'
subdirectories of '/home/Tsarina Baelarina Nina/' ... is it Guix, is it
GDM, is it the GNOME desktop ...?

[vm-image.tmpl (text/plain, attachment)]
[signature.asc (application/pgp-signature, inline)]

Information forwarded to bug-guix <at> gnu.org:
bug#53743; Package guix. (Fri, 04 Feb 2022 04:20:02 GMT) Full text and rfc822 format available.

Message #11 received at 53743 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Maxime Devos <maximedevos <at> telenet.be>
Cc: 53743 <at> debbugs.gnu.org, Tsarina Baelarina Nina <bills.jared <at> outlook.com>
Subject: Re: bug#53743: Using spaces in names doesn't have complete
 sanitization
Date: Thu, 3 Feb 2022 23:18:57 -0500
On Thu, Feb 03, 2022 at 06:32:51PM +0000, Maxime Devos wrote:
> Tsarina Baelarina Nina schreef op wo 02-02-2022 om 20:49 [-0800]:
> > I put my name as Tsarina Baelarina Nina, as opposed to my real name.
> > It created the correct home profile, but also included the two extra
> > empty directories in my home directory as included in the attachment
> > for proof. I think I remember reading something about camel casing
> > for user names on the system, as in the name can't start with a
> > capital letter, but I thought you could get away with spaces if you
> > escaped the strings properly \(space).
> 
> I can reproduce with the attached configuration.
> I'm wondering what software is creating these 'Baelarina' and 'Nina'
> subdirectories of '/home/Tsarina Baelarina Nina/' ... is it Guix, is it
> GDM, is it the GNOME desktop ...?

I'm not very familiar with this part of the system, but I think that
user home directories are created here, in ((gnu build activation)
activate-users+groups):

https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/build/activation.scm?id=ff093f5739a61e77b296feccc48d260b9bb574c0#n160




Information forwarded to bug-guix <at> gnu.org:
bug#53743; Package guix. (Fri, 04 Feb 2022 04:52:01 GMT) Full text and rfc822 format available.

Message #14 received at 53743 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Maxime Devos <maximedevos <at> telenet.be>
Cc: 53743 <at> debbugs.gnu.org, Tsarina Baelarina Nina <bills.jared <at> outlook.com>
Subject: Re: bug#53743: Using spaces in names doesn't have complete
 sanitization
Date: Thu, 3 Feb 2022 23:50:55 -0500
On Thu, Feb 03, 2022 at 06:32:51PM +0000, Maxime Devos wrote:
> I can reproduce with the attached configuration.
> I'm wondering what software is creating these 'Baelarina' and 'Nina'
> subdirectories of '/home/Tsarina Baelarina Nina/' ... is it Guix, is it
> GDM, is it the GNOME desktop ...?

I tried to create a minimal reproducer by editing the user-account in
'gnu/system/examples/bare-bones.tmpl' with the name "Tsarina Baelarina
Nina".

Guix did the right thing, and created a single directory called
'/home/Tsarina Baelarina Nina/', without the bogus subdirectories.

So, if it is caused by Guix, it's not the basic user-account tooling
that does it.




This bug report was last modified 3 years and 132 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.