From 187ae2cdb841e578c36473c59724c7c1237c0fe6 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 4 Apr 2022 22:21:25 +0200
Subject: login: T4341: disable user account prior to deletion

(cherry picked from commit efa753bc661d04967237e7ec3d72d3757230aaf9)
---
 src/conf_mode/system-login.py | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src/conf_mode/system-login.py')

diff --git a/src/conf_mode/system-login.py b/src/conf_mode/system-login.py
index 8aa43dd32..ed4865f22 100755
--- a/src/conf_mode/system-login.py
+++ b/src/conf_mode/system-login.py
@@ -256,6 +256,9 @@ def apply(login):
     if 'rm_users' in login:
         for user in login['rm_users']:
             try:
+                # Disable user to prevent re-login
+                call(f'usermod -s /sbin/nologin {user}')
+
                 # Logout user if he is still logged in
                 if user in list(set([tmp[0] for tmp in users()])):
                     print(f'{user} is logged in, forcing logout!')
-- 
cgit v1.2.3