Could dbus possible be doing damage?

[Lawrence Velázquez]

On Nov 2, 2014, at 9:29 PM, Marcus Calhoun-Lopez <mcalhoun at macports.org> wrote:

> Recently, a user reported having his root account deleted after installing the port dbus (Ticket #45737).
> I do not see how it is possible, but I though that we can not risk such a catastrophic result for anyone else.
> Can anyone image how such a situation could come about?

    unset -nocomplain startup_root
    if { [variant_isset no_root] } {
        set dbus_user     ${install.user}
        set dbus_group    ${install.group}
    [...]
    }
    add_users         ${dbus_user} group=${dbus_group} realname=Message\ Bus

What happens here if install.user is root?

vq