From: intrigeri <intrigeri@boum.org>
Date: Sun, 11 Nov 2012 21:15:08 +0000 (+0100)
Subject: Give the debian-tor user /bin/false as a shell.
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=e24b353ad6d7e1a6cfec104f8946a4b0e9786a0d;p=puppet-tor.git

Give the debian-tor user /bin/false as a shell.

This is the Debian package default, and I've never seen the need to give it
a real shell.
---

diff --git a/manifests/daemon.pp b/manifests/daemon.pp
index bbf83dd..28b14d1 100644
--- a/manifests/daemon.pp
+++ b/manifests/daemon.pp
@@ -29,7 +29,7 @@ class tor::daemon (
     comment   => 'tor user,,,',
     ensure    => present,
     home      => "${data_dir}",
-    shell     => '/bin/bash',
+    shell     => '/bin/false',
     gid       => 'debian-tor',
     require   => Group['debian-tor'], 
   }