From efa753bc661d04967237e7ec3d72d3757230aaf9 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 4 Apr 2022 22:21:25 +0200
Subject: login: T4341: disable user account prior to deletion

---
 src/conf_mode/system-login.py | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'src')

diff --git a/src/conf_mode/system-login.py b/src/conf_mode/system-login.py
index 4dd7f936d..9b8f194fb 100755
--- a/src/conf_mode/system-login.py
+++ b/src/conf_mode/system-login.py
@@ -250,6 +250,9 @@ def apply(login):
     if 'rm_users' in login:
         for user in login['rm_users']:
             try:
+                # Disable user to prevent re-login
+                call(f'usermod -s /sbin/nologin {user}')
+
                 # Logout user if he is still logged in
                 if user in list(set([tmp[0] for tmp in users()])):
                     print(f'{user} is logged in, forcing logout!')
-- 
cgit v1.2.3