Lubuntu/calamares-settings-ubuntu
4
0
Fork 0
mirror of https://git.launchpad.net/~ubuntu-qt-code/+git/calamares-settings-ubuntu synced 2025-06-13 02:31:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Make forbidden_names much stronger (LP: #2088576).

Browse Source
This commit is contained in:
Simon Quigley 2024-11-27 23:28:14 -06:00
parent a202c2a229
commit a54615cb83
4 changed files with 146 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
debian/changelog vendored
View File

@ -2,6 +2,7 @@ calamares-settings-ubuntu (1:25.04.11) UNRELEASED; urgency=medium
* Rearrange the Lubuntu module order to account for packages with new stuff * Rearrange the Lubuntu module order to account for packages with new stuff
to put in the initramfs. to put in the initramfs.
* Make forbidden_names much stronger (LP: #2088576).
-- Simon Quigley <tsimonq2@ubuntu.com> Mon, 25 Nov 2024 03:02:04 -0600 -- Simon Quigley <tsimonq2@ubuntu.com> Mon, 25 Nov 2024 03:02:04 -0600

48
kubuntu/modules/users.conf
View File

@ -19,4 +19,50 @@ passwordRequirements:
# expectation derived from Ubuntu here. # expectation derived from Ubuntu here.
user: user:
shell: /bin/bash shell: /bin/bash
forbidden_names: [ root ] forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer

52
lubuntu/modules/users.conf
View File

@ -17,7 +17,57 @@ passwordRequirements:
maxLength: -1 maxLength: -1
# Explicitly set the shell instead of deferring to Calamares. We have a platform # Explicitly set the shell instead of deferring to Calamares. We have a platform
# expectation derived from Ubuntu here. # expectation derived from Ubuntu here.
#
# The forbidden_names list is grabbed from `awk -F: '{print $1}' /etc/passwd`
# on a live ISO. _apt was changed to apt, lubuntu was removed, and nginx and
# www-data were added
user: user:
shell: /bin/bash shell: /bin/bash
forbidden_names: [ root ] forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer
allowActiveDirectory: true allowActiveDirectory: true

48
ubuntuunity/modules/users.conf
View File

@ -19,4 +19,50 @@ passwordRequirements:
# expectation derived from Ubuntu here. # expectation derived from Ubuntu here.
user: user:
shell: /bin/bash shell: /bin/bash
forbidden_names: [ root ] forbidden_names:
- root
- nginx
- www-data
- daemon
- bin
- sys
- sync
- games
- man
- lp
- mail
- news
- uucp
- proxy
- www-data
- backup
- list
- irc
- apt
- nobody
- systemd-network
- systemd-timesync
- dhcpcd
- messagebus
- syslog
- systemd-resolve
- usbmux
- tss
- uuidd
- whoopsie
- dnsmasq
- avahi
- nm-openvpn
- tcpdump
- speech-dispatcher
- cups-pk-helper
- fwupd-refresh
- sddm
- saned
- cups-browsed
- hplip
- polkitd
- rtkit
- colord
- geoclue
- installer