Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1234240

Bug#1008082: implement deluser --system --lock functionality

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

>
> deluser --lock => usermod -lock. Nothing else.
> deluser --system --lock => usermod -lock. Nothing else.


> adduser --unlock => usermod --unlock. Nothing else.
> adduser --system --unlock => usermod --unlock. Nothing else.


So to reiterate for the record:
- locking does nothing to expiration or login shell, crontabs, doesn't back
up or remove any files.
- locking an account reversibly invalidates the password via usermod
- any account can be locked; system accounts can be set to lock by default
in /etc/deluser.conf.

I do apologize if this has already been hashed out, but is password
invalidation enough, *especially* for system users where unpassworded
services/crons/etc are the primary use case?  Those would still run unless
we change the shell.  And public key authentication via ssh, for that
matter.. the more I think about it, the more I think that at the very least
we should also expire the account, ie. usermod --lock --expiredate
$last_friday_night

fwiw, this is what I had written before I saw your feedback:

&systemcall('/usr/sbin/usermod', "-e", $exp_date, "-f", 0, "-L", "-s",
"/usr/bin/nologin", $user);

mb

[1]
https://unix.stackexchange.com/questions/700826/completely-lock-user-account-on-server-including-ssh

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1008082: implement deluser --system --lock functionality Matt Barry <matt.barry23@gmail.com> - 2025-02-20 16:10 +0100
  Bug#1008082: implement deluser --system --lock functionality Marc Haber <mh+debian-packages@zugschlus.de> - 2025-02-20 18:40 +0100
    Bug#1008082: implement deluser --system --lock functionality Matt Barry <matt.barry23@gmail.com> - 2025-02-20 20:30 +0100
      Bug#1008082: implement deluser --system --lock functionality Marc Haber <mh+debian-packages@zugschlus.de> - 2025-02-20 21:50 +0100
        Bug#1008082: implement deluser --system --lock functionality Matt Barry <matt.barry23@gmail.com> - 2025-02-21 17:30 +0100
          Bug#1008082: implement deluser --system --lock functionality Marc Haber <mh+debian-packages@zugschlus.de> - 2025-02-22 11:20 +0100

csiph-web