From e24b353ad6d7e1a6cfec104f8946a4b0e9786a0d Mon Sep 17 00:00:00 2001 From: intrigeri Date: Sun, 11 Nov 2012 22:15:08 +0100 Subject: Give the debian-tor user /bin/false as a shell. This is the Debian package default, and I've never seen the need to give it a real shell. --- manifests/daemon.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifests/daemon.pp b/manifests/daemon.pp index bbf83dd..28b14d1 100644 --- a/manifests/daemon.pp +++ b/manifests/daemon.pp @@ -29,7 +29,7 @@ class tor::daemon ( comment => 'tor user,,,', ensure => present, home => "${data_dir}", - shell => '/bin/bash', + shell => '/bin/false', gid => 'debian-tor', require => Group['debian-tor'], } -- cgit v1.2.3