Bug 13996

Summary: Parsing of user:group for start-stop-daemon fails if username contains a period
Product: Busybox Reporter: Glenn Burkhardt <glenn.burkhardt>
Component: Standard ComplianceAssignee: unassigned
Status: NEW ---    
Severity: normal CC: busybox-cvs
Priority: P5    
Version: 1.33.x   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Host: Target:
Build:

Description Glenn Burkhardt 2021-07-11 18:38:08 UTC 
We typically use periods in user and group names.  The function parse_chown_usergroup_or_die() supports an obsolete delimiter for separating the user/group name.  For 'start-stop-daemon', the documentation clearly calls for ':' to be the delimiter.

See ./libpwdgrp/uidgid_get.c line 96:

95              /* Check if there is a group name */
96              group = strchr(user_group, '.'); /* deprecated? */
97              if (!group)

Yes, it's deprecated, and should be removed.