========================================================== 2025-12-30T00:24:55.856791446Z Bug 28981: unbound用户家目录不一致详细验证 2025-12-30T00:24:55.856796109Z ========================================================== 2025-12-30T00:24:55.856797928Z 2025-12-30T00:24:55.856799468Z 问题描述: Anolis OS 8.8定义了unbound用户,但家目录/etc/unbound不存在 2025-12-30T00:24:55.856801607Z 影响: 系统用户配置与文件系统不一致,可能导致权限问题 2025-12-30T00:24:55.856803428Z 2025-12-30T00:24:55.856805225Z ********** CentOS 8 验证结果 ********** 2025-12-30T00:24:55.857505065Z ===== CentOS 8 unbound用户验证 ===== 2025-12-30T00:24:55.857529486Z 验证时间: Tue Dec 30 00:23:37 UTC 2025 2025-12-30T00:24:55.857531862Z 2025-12-30T00:24:55.857533595Z 1. 检查/etc/passwd中的unbound用户: 2025-12-30T00:24:55.857535272Z 未找到unbound用户 2025-12-30T00:24:55.857536857Z 2025-12-30T00:24:55.857538854Z 2. 使用getent检查unbound用户: 2025-12-30T00:24:55.857540380Z getent未找到unbound用户 2025-12-30T00:24:55.857542571Z 2025-12-30T00:24:55.857543982Z 3. 检查用户家目录是否存在: 2025-12-30T00:24:55.857545529Z unbound用户不存在,跳过家目录检查 2025-12-30T00:24:55.857547147Z 2025-12-30T00:24:55.857548475Z 4. 检查/etc/unbound目录: 2025-12-30T00:24:55.857550044Z /etc/unbound目录不存在 2025-12-30T00:24:55.857551692Z 2025-12-30T00:24:55.857553036Z 5. 检查unbound包安装状态: 2025-12-30T00:24:55.857554522Z package unbound is not installed 2025-12-30T00:24:55.857556027Z unbound包未安装 2025-12-30T00:24:55.857557486Z 2025-12-30T00:24:55.857558858Z 6. 尝试安装unbound包: 2025-12-30T00:24:55.857560352Z 2025-12-30T00:24:55.857561689Z Installed: 2025-12-30T00:24:55.857563320Z libevent-2.1.8-5.el8.x86_64 unbound-1.7.3-17.el8.x86_64 2025-12-30T00:24:55.857564991Z unbound-libs-1.7.3-17.el8.x86_64 2025-12-30T00:24:55.857566502Z 2025-12-30T00:24:55.857567856Z 安装后状态: unbound-1.7.3-17.el8.x86_64 2025-12-30T00:24:55.857569388Z 2025-12-30T00:24:55.857570814Z 7. 安装后检查用户和目录: 2025-12-30T00:24:55.857572417Z unbound:x:998:996:Unbound DNS resolver:/etc/unbound:/sbin/nologin 2025-12-30T00:24:55.857574004Z drwxr-xr-x 5 root root 4096 Dec 30 00:24 /etc/unbound 2025-12-30T00:24:55.857631298Z 2025-12-30T00:24:55.857643074Z ********** Anolis OS 8.8 验证结果 ********** 2025-12-30T00:24:55.858361513Z ===== Anolis OS 8.8 unbound用户验证 ===== 2025-12-30T00:24:55.858373472Z 验证时间: Tue Dec 30 00:23:37 UTC 2025 2025-12-30T00:24:55.858375598Z 2025-12-30T00:24:55.858377129Z 1. 检查/etc/passwd中的unbound用户: 2025-12-30T00:24:55.858378947Z unbound:x:998:996:Unbound DNS resolver:/etc/unbound:/sbin/nologin 2025-12-30T00:24:55.858380594Z 2025-12-30T00:24:55.858381981Z 2. 使用getent检查unbound用户: 2025-12-30T00:24:55.858383496Z unbound:x:998:996:Unbound DNS resolver:/etc/unbound:/sbin/nologin 2025-12-30T00:24:55.858385030Z 2025-12-30T00:24:55.858386400Z 3. 检查用户家目录是否存在: 2025-12-30T00:24:55.858391144Z unbound用户家目录字段: /etc/unbound 2025-12-30T00:24:55.858392959Z ls: cannot access '/etc/unbound': No such file or directory 2025-12-30T00:24:55.858394629Z 家目录不存在 2025-12-30T00:24:55.858396120Z 2025-12-30T00:24:55.858397502Z 4. 检查/etc/unbound目录: 2025-12-30T00:24:55.858399025Z /etc/unbound目录不存在 2025-12-30T00:24:55.858400590Z 2025-12-30T00:24:55.858401987Z 5. 检查unbound包安装状态: 2025-12-30T00:24:55.858403472Z package unbound is not installed 2025-12-30T00:24:55.858404949Z unbound包未安装 2025-12-30T00:24:55.858406431Z 2025-12-30T00:24:55.858407783Z 6. 尝试安装unbound包: 2025-12-30T00:24:55.858409293Z 2025-12-30T00:24:55.858410646Z Installed: 2025-12-30T00:24:55.858412199Z libevent-2.1.8-5.el8.x86_64 unbound-1.16.2-9.an8.x86_64 2025-12-30T00:24:55.858413819Z unbound-libs-1.16.2-9.an8.x86_64 2025-12-30T00:24:55.858415272Z 2025-12-30T00:24:55.858416650Z 安装后状态: unbound-1.16.2-9.an8.x86_64 2025-12-30T00:24:55.858418220Z 2025-12-30T00:24:55.858419590Z 7. 安装后检查用户和目录: 2025-12-30T00:24:55.858421170Z unbound:x:998:996:Unbound DNS resolver:/etc/unbound:/sbin/nologin 2025-12-30T00:24:55.858422705Z drwxr-xr-x 5 root root 4096 Dec 30 00:24 /etc/unbound 2025-12-30T00:24:55.858424189Z 8. 检查系统用户创建机制: 2025-12-30T00:24:55.858425677Z 检查/etc/login.defs中的USERGROUPS_ENAB和CREATE_HOME设置: 2025-12-30T00:24:55.858427375Z CREATE_HOME yes 2025-12-30T00:24:55.858429029Z USERGROUPS_ENAB yes 2025-12-30T00:24:55.858430536Z 2025-12-30T00:24:55.858431921Z 9. 检查unbound包的用户创建脚本: 2025-12-30T00:24:55.858438227Z 2025-12-30T00:24:55.859167798Z ===== Bug 28981分析报告 ===== 2025-12-30T00:24:55.859178708Z 2025-12-30T00:24:55.859188063Z 用户存在性对比: 2025-12-30T00:24:55.859190235Z CentOS: 有unbound用户 2025-12-30T00:24:55.859191956Z Anolis: 有unbound用户 2025-12-30T00:24:55.859193372Z 2025-12-30T00:24:55.859194738Z 家目录存在性对比: 2025-12-30T00:24:55.859196276Z CentOS: unbound用户家目录存在 2025-12-30T00:24:55.859197888Z Anolis: unbound用户家目录缺失 2025-12-30T00:24:55.859199359Z 2025-12-30T00:24:55.859200806Z 结论判断: 2025-12-30T00:24:55.859202870Z 1. 如果只有Anolis有unbound用户而CentOS没有,是差异但不是bug 2025-12-30T00:24:55.859204884Z 2. 如果Anolis有用户但家目录缺失,而CentOS用户家目录完整,是兼容性问题 2025-12-30T00:24:55.859206619Z 3. 如果两者都没有用户,不是问题 2025-12-30T00:24:55.859208160Z 2025-12-30T00:24:55.859209555Z ===== 修复建议 ===== 2025-12-30T00:24:55.859211105Z 如果确认是兼容性问题: 2025-12-30T00:24:55.859212620Z 1. 创建缺失的目录: sudo mkdir -p /etc/unbound 2025-12-30T00:24:55.859214159Z 2. 设置正确权限: sudo chown unbound:unbound /etc/unbound 2025-12-30T00:24:55.859215821Z 3. 或者从/etc/passwd中删除unbound用户(如果不使用unbound服务)