commit 0ef754f385ccd9ced867bc96a2fa3339a8a66936
parent 86fae308fe99eb24724294485777f3e1a168d1cb
Author: Anders Damsgaard <anders@adamsgaard.dk>
Date: Sun, 23 Feb 2020 07:56:40 +0100
Unset login shell for new users
Diffstat:
1 file changed, 1 insertion(+), 0 deletions(-)
diff --git a/.local/bin/newuser b/.local/bin/newuser
@@ -73,6 +73,7 @@ add_user() {
printf 'limiting access to /home/%s\n' "$1"
fi
doas sh -c "useradd -m $1 && \
+ chpass -s /sbin/nologin $1 \
echo 'permit nopass keepenv ad as $1' >> /etc/doas.conf && \
cat $HOME/.ssh/id_rsa.pub >> /home/$1/.ssh/authorized_keys && \
chmod go-rx /home/$1"