sysusers: optionally create fully locked accounts (#34876)
authorLuca Boccassi <bluca@debian.org>
Tue, 29 Oct 2024 18:46:14 +0000 (18:46 +0000)
committerGitHub <noreply@github.com>
Tue, 29 Oct 2024 18:46:14 +0000 (18:46 +0000)
commitd140d478e2ebee8741cd4363c91b0da3f091d8fe
treeeab7ec1bb9722f7a629c67aaf9ceb21521946699
parenta91c739a2459ab325a7ceca9789330193ce0c61e
parent89858a0513ae69983afea3690b34aaa1019d9fac
sysusers: optionally create fully locked accounts (#34876)

Let's ramp up security for system user accounts, at least where
possible, by creating them fully locked (instead of just with an invalid
password). This matters when taking non-password (i.e. SSH) logins into
account.

Fixes: #13522