20663: Expand the default SyncIgnoredGroups 20663-login-sync-config
authorBrett Smith <brett.smith@curii.com>
Fri, 23 Jun 2023 18:14:38 +0000 (14:14 -0400)
committerBrett Smith <brett.smith@curii.com>
Fri, 23 Jun 2023 18:14:38 +0000 (14:14 -0400)
commitaad254eb85755d41927fe1809cb52c65bb8aac20
tree2370ad76a18d677022472dc1a8a34e0db7a28276
parent4b7705bc768f79b7c7900361dc61ce210096af3d
20663: Expand the default SyncIgnoredGroups

We discussed at standup that we prioritize the security of the default
configuration over backwards compatibility. This new default does that.

The list of groups is primarily informed by:
<https://wiki.debian.org/SystemGroups#Other_System_Groups>
<https://docs.fedoraproject.org/en-US/packaging-guidelines/UsersAndGroups/#_list_of_statically_allocated_uidgid_and_corresponding_package>

Arvados-DCO-1.1-Signed-off-by: Brett Smith <brett.smith@curii.com>
doc/admin/upgrading.html.textile.liquid
lib/config/config.default.yml