Give the debian-tor user /bin/false as a shell.

This is the Debian package default, and I've never seen the need to give it
a real shell.

diff --git a/manifests/daemon.pp b/manifests/daemon.pp
index bbf83dd26806326e468199f1fb630605b5b13863..28b14d1d607aeec87a3512a2505299396aceda75 100644 (file)
--- a/manifests/daemon.pp
+++ b/manifests/daemon.pp
@@ -29,7 +29,7 @@ class tor::daemon (
     comment   => 'tor user,,,',
     ensure    => present,
     home      => "${data_dir}",
-    shell     => '/bin/bash',
+    shell     => '/bin/false',
     gid       => 'debian-tor',
     require   => Group['debian-tor'], 
   }