Project

General

Profile

Actions
Copy link

Feature #17927

open

Use /sbin/nologin instead of /bin/false

Added by Jason Nance over 7 years ago. Updated over 7 years ago.

Status:
New
Priority:
Low
Assignee:
-
Category:
Foreman modules
Target version:
-
Difficulty:
Triaged:
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Foreman - 1.13.3
Red Hat JIRA:

Description

I'd like to request that /sbin/nologin be used as the "no shell" instead of /bin/false for the foreman and foreman-proxy users (and for any other service accounts created by TFM).

Actions
Copy link
 #1

Updated by Dominic Cleal over 7 years ago

  • Project changed from Foreman to Installer
  • Category set to Foreman modules

Note that Foreman RPMs already use /sbin/nologin, but the installer's user resources all default to /bin/false causing it to change.

Actions
Copy link
 #2

Updated by Ewoud Kohl van Wijngaarden over 7 years ago

This was changed in https://github.com/theforeman/puppet-foreman_proxy/commit/59c90d4711862c05fc8b24f18baa1ad9de168e86 for better compatibility. I suppose we should parametrize this.

Actions
Copy link

Also available in: Atom PDF