sysusers.d: lock all system users defined by us

poettering · poettering · commit a4c0528f1425 · 2024-10-29T11:00:13.000+01:00
diff --git a/sysusers.d/basic.conf.in b/sysusers.d/basic.conf.in
@@ -11,7 +11,7 @@ u root    0:0     "Super User" /root
 
 # The nobody user/group for NFS file systems
 g {{NOBODY_GROUP_NAME}} 65534       -            -
-u {{NOBODY_USER_NAME }} 65534:65534 "Kernel Overflow User"     -
+u! {{NOBODY_USER_NAME }} 65534:65534 "Kernel Overflow User"     -
 
 # Administrator group: can *see* more than normal users
 g adm     {{ADM_GID    }}     -            -
diff --git a/sysusers.d/systemd-coredump.conf b/sysusers.d/systemd-coredump.conf
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-coredump - "systemd Core Dumper"
+u! systemd-coredump - "systemd Core Dumper"
diff --git a/sysusers.d/systemd-network.conf.in b/sysusers.d/systemd-network.conf.in
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-network {{SYSTEMD_NETWORK_UID}} "systemd Network Management"
+u! systemd-network {{SYSTEMD_NETWORK_UID}} "systemd Network Management"
diff --git a/sysusers.d/systemd-oom.conf b/sysusers.d/systemd-oom.conf
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-oom - "systemd Userspace OOM Killer"
+u! systemd-oom - "systemd Userspace OOM Killer"
diff --git a/sysusers.d/systemd-remote.conf b/sysusers.d/systemd-remote.conf
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-journal-remote  - "systemd Journal Remote"
+u! systemd-journal-remote  - "systemd Journal Remote"
diff --git a/sysusers.d/systemd-resolve.conf.in b/sysusers.d/systemd-resolve.conf.in
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-resolve {{SYSTEMD_RESOLVE_UID}} "systemd Resolver"
+u! systemd-resolve {{SYSTEMD_RESOLVE_UID}} "systemd Resolver"
diff --git a/sysusers.d/systemd-timesync.conf.in b/sysusers.d/systemd-timesync.conf.in
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-timesync {{SYSTEMD_TIMESYNC_UID}} "systemd Time Synchronization"
+u! systemd-timesync {{SYSTEMD_TIMESYNC_UID}} "systemd Time Synchronization"
