Revert "fix: Allow accounts to belong to GID 0"

This reverts commit 162b636.
chainguard-dev · Nov 18, 2024 · f9e43fa · f9e43fa
1 parent 162b636
commit f9e43fa
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/pkg/build/accounts.go b/pkg/build/accounts.go
@@ -38,6 +38,9 @@ func appendGroup(groups []passwd.GroupEntry, group types.Group) []passwd.GroupEn
 }
 
 func userToUserEntry(user types.User) passwd.UserEntry {
+	if user.GID == 0 {
+		user.GID = user.UID
+	}
 	if user.Shell == "" {
 		user.Shell = "/bin/sh"
 	}

diff --git a/pkg/build/types/image_configuration.go b/pkg/build/types/image_configuration.go
@@ -214,6 +214,10 @@ func (ic *ImageConfiguration) Validate() error {
 		if g.GroupName == "" {
 			return fmt.Errorf("configured group %v has no configured group name", g)
 		}
+
+		if g.GID == 0 {
+			return fmt.Errorf("configured group %v has GID 0", g)
+		}
 	}
 	return nil
 }