diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-08-29 17:44:46 +0200 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2023-08-29 17:44:46 +0200 |
| commit | c5def347e7cd5bca7a3d14d5a7d950cd09393921 (patch) | |
| tree | 34f6a0c9de8b268de8f7188bee63b749f1e05ccd | |
| parent | ed5d11a7b3e40e13c07823d9336cdc47d440165c (diff) | |
| download | vyos-1x-c5def347e7cd5bca7a3d14d5a7d950cd09393921.tar.gz vyos-1x-c5def347e7cd5bca7a3d14d5a7d950cd09393921.zip | |
Debian: T5521: remove unused tacacs UNIX group
| -rw-r--r-- | debian/vyos-1x.postinst | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/debian/vyos-1x.postinst b/debian/vyos-1x.postinst index cff533e0a..b43416152 100644 --- a/debian/vyos-1x.postinst +++ b/debian/vyos-1x.postinst @@ -29,6 +29,11 @@ do sed -i "/^# Standard Un\*x authentication\./i${PAM_CONFIG}" $file done +# We do not make use of a TACACS UNIX group - drop it +if grep -q '^tacacs' /etc/group; then + delgroup tacacs +fi + # Both RADIUS and TACACS users belong to aaa group - this must be added first if ! grep -q '^aaa' /etc/group; then addgroup --firstgid 1000 --quiet aaa @@ -42,6 +47,7 @@ if grep -q '^tacacs' /etc/passwd; then vyos_group=vyattaop while [ $level -lt 16 ]; do userdel tacacs${level} || true + rm -rf /home/tacacs${level} || true level=$(( level+1 )) done 2>&1 fi |