I still don't like the defaults on update-passwd

I really think many of these should by default *NOT* be given a shell at all. At the very least, the insecure change requests should be split out from the security neutral ones like the GECOS and sasl ones. The list of proposed changes is: Changing shell of daemon from /dev/null to /bi

I still don't like the defaults on update-passwd

I really think many of these should by default *NOT* be given a shell at all. At the very least, the insecure change requests should be split out from the security neutral ones like the GECOS and sasl ones. The list of proposed changes is: Changing shell of daemon from /dev/null to /bi