sysusers.d: lock all system users defined by us

diff --git a/sysusers.d/basic.conf.in b/sysusers.d/basic.conf.in
index 0aec080a4cbb907cb05deced7266f7a32956cd4a..992af346ca66ff7b2bc76db824d5b6a793496fd7 100644 (file)
--- a/sysusers.d/basic.conf.in
+++ b/sysusers.d/basic.conf.in
@@ -11,7 +11,7 @@ u root    0:0     "Super User" /root
 
 # The nobody user/group for NFS file systems
 g {{NOBODY_GROUP_NAME}} 65534       -            -
-u {{NOBODY_USER_NAME }} 65534:65534 "Kernel Overflow User"     -
+u! {{NOBODY_USER_NAME }} 65534:65534 "Kernel Overflow User"     -
 
 # Administrator group: can *see* more than normal users
 g adm     {{ADM_GID    }}     -            -

diff --git a/sysusers.d/systemd-coredump.conf b/sysusers.d/systemd-coredump.conf
index c4ff003bd605b434193201af1cdf3939f96da17e..2ab8a41b9da385d0038254462b3b65c5c755ae41 100644 (file)
--- a/sysusers.d/systemd-coredump.conf
+++ b/sysusers.d/systemd-coredump.conf
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-coredump - "systemd Core Dumper"
+u! systemd-coredump - "systemd Core Dumper"

diff --git a/sysusers.d/systemd-network.conf.in b/sysusers.d/systemd-network.conf.in
index 7c64a4681fd3aa950932842c625cf7bf3f47d478..fc04827efdd6a6be12f7c833b2bb767e336d237d 100644 (file)
--- a/sysusers.d/systemd-network.conf.in
+++ b/sysusers.d/systemd-network.conf.in
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-network {{SYSTEMD_NETWORK_UID}} "systemd Network Management"
+u! systemd-network {{SYSTEMD_NETWORK_UID}} "systemd Network Management"

diff --git a/sysusers.d/systemd-oom.conf b/sysusers.d/systemd-oom.conf
index 27e571feb5e37b68787929e5b8981369c73282f7..1ce3d23b6be98640249fdcff7864a78c8fd1bcba 100644 (file)
--- a/sysusers.d/systemd-oom.conf
+++ b/sysusers.d/systemd-oom.conf
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-oom - "systemd Userspace OOM Killer"
+u! systemd-oom - "systemd Userspace OOM Killer"

diff --git a/sysusers.d/systemd-remote.conf b/sysusers.d/systemd-remote.conf
index ca20c24896100fcb04bdac64798054c1a416ff97..796850c9e617052d94ba7ff145fb11398b796806 100644 (file)
--- a/sysusers.d/systemd-remote.conf
+++ b/sysusers.d/systemd-remote.conf
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-journal-remote  - "systemd Journal Remote"
+u! systemd-journal-remote  - "systemd Journal Remote"

diff --git a/sysusers.d/systemd-resolve.conf.in b/sysusers.d/systemd-resolve.conf.in
index 9f02ef94e6e1c1a6853063f6dd90b0fefaec1486..e385070c45be31385127e236c643bf5eb85dd139 100644 (file)
--- a/sysusers.d/systemd-resolve.conf.in
+++ b/sysusers.d/systemd-resolve.conf.in
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-resolve {{SYSTEMD_RESOLVE_UID}} "systemd Resolver"
+u! systemd-resolve {{SYSTEMD_RESOLVE_UID}} "systemd Resolver"

diff --git a/sysusers.d/systemd-timesync.conf.in b/sysusers.d/systemd-timesync.conf.in
index e50f0254169dc8af545137ad9fd8cabfb5d0d78e..7b9fb3d8d9fc108822249b26622b413aa5e8a17a 100644 (file)
--- a/sysusers.d/systemd-timesync.conf.in
+++ b/sysusers.d/systemd-timesync.conf.in
@@ -5,4 +5,4 @@
 #  the Free Software Foundation; either version 2.1 of the License, or
 #  (at your option) any later version.
 
-u systemd-timesync {{SYSTEMD_TIMESYNC_UID}} "systemd Time Synchronization"
+u! systemd-timesync {{SYSTEMD_TIMESYNC_UID}} "systemd Time Synchronization"