From c5def347e7cd5bca7a3d14d5a7d950cd09393921 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Tue, 29 Aug 2023 17:44:46 +0200
Subject: Debian: T5521: remove unused tacacs UNIX group

---
 debian/vyos-1x.postinst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/debian/vyos-1x.postinst b/debian/vyos-1x.postinst
index cff533e0a..b43416152 100644
--- a/debian/vyos-1x.postinst
+++ b/debian/vyos-1x.postinst
@@ -29,6 +29,11 @@ do
     sed -i "/^# Standard Un\*x authentication\./i${PAM_CONFIG}" $file
 done
 
+# We do not make use of a TACACS UNIX group - drop it
+if grep -q '^tacacs' /etc/group; then
+    delgroup tacacs
+fi
+
 # Both RADIUS and TACACS users belong to aaa group - this must be added first
 if ! grep -q '^aaa' /etc/group; then
     addgroup --firstgid 1000 --quiet aaa
@@ -42,6 +47,7 @@ if grep -q '^tacacs' /etc/passwd; then
         vyos_group=vyattaop
         while [ $level -lt 16 ]; do
             userdel tacacs${level} || true
+            rm -rf /home/tacacs${level} || true
             level=$(( level+1 ))
         done 2>&1
     fi
-- 
cgit v1.2.3