Am 30.06.20 um 11:20 schrieb Niels Thykier: > What about removal; is there any > action to be done for locking the users?
Good question. Afaics there are no provisions in systemd-sysusers to remove users again. It's my understanding, that there is no clear consensus what should happen on package purge. Some packages do manually remove system users and go to some length to find files/directories owned by a system user/group and remove them. Some maintainers are of the opinion, that a system user once created should not be removed again. I think both viewpoints are valid, but the never-remove-a-system-user is probably the safer approach. Regarding locking: Afaik, systemd-sysusers creates locked system users by default. (From the man page: The account will be created disabled, so that logins are not allowed.) Regards, Michael
signature.asc
Description: OpenPGP digital signature
