summaryrefslogtreecommitdiff
path: root/debian/vyos-1x.postinst
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2023-08-29 17:44:46 +0200
committerChristian Breunig <christian@breunig.cc>2023-08-29 17:44:46 +0200
commitc5def347e7cd5bca7a3d14d5a7d950cd09393921 (patch)
tree34f6a0c9de8b268de8f7188bee63b749f1e05ccd /debian/vyos-1x.postinst
parented5d11a7b3e40e13c07823d9336cdc47d440165c (diff)
downloadvyos-1x-c5def347e7cd5bca7a3d14d5a7d950cd09393921.tar.gz
vyos-1x-c5def347e7cd5bca7a3d14d5a7d950cd09393921.zip
Debian: T5521: remove unused tacacs UNIX group
Diffstat (limited to 'debian/vyos-1x.postinst')
-rw-r--r--debian/vyos-1x.postinst6
1 files changed, 6 insertions, 0 deletions
diff --git a/debian/vyos-1x.postinst b/debian/vyos-1x.postinst
index cff533e0a..b43416152 100644
--- a/debian/vyos-1x.postinst
+++ b/debian/vyos-1x.postinst
@@ -29,6 +29,11 @@ do
sed -i "/^# Standard Un\*x authentication\./i${PAM_CONFIG}" $file
done
+# We do not make use of a TACACS UNIX group - drop it
+if grep -q '^tacacs' /etc/group; then
+ delgroup tacacs
+fi
+
# Both RADIUS and TACACS users belong to aaa group - this must be added first
if ! grep -q '^aaa' /etc/group; then
addgroup --firstgid 1000 --quiet aaa
@@ -42,6 +47,7 @@ if grep -q '^tacacs' /etc/passwd; then
vyos_group=vyattaop
while [ $level -lt 16 ]; do
userdel tacacs${level} || true
+ rm -rf /home/tacacs${level} || true
level=$(( level+1 ))
done 2>&1
fi