accounts: Don't allow to register accounts containing the word "ipfire"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/backend/accounts.py b/src/backend/accounts.py
index 21181e2256abecea68a48427b6da39704a93a3b5..659df06c5c125ee0fabe3b1361575f997a262297 100644 (file)
--- a/src/backend/accounts.py
+++ b/src/backend/accounts.py
@@ -349,10 +349,14 @@ class Accounts(Object):
        def uid_is_valid(self, uid):
                # https://unix.stackexchange.com/questions/157426/what-is-the-regex-to-validate-linux-users
                m = re.match(r"^[a-z_][a-z0-9_-]{3,31}$", uid)
-               if m:
-                       return True
+               if m is None:
+                       return False
 
-               return False
+               # UID cannot contain "ipfire"
+               if "ipfire" in uid:
+                       return False
+
+               return True
 
        def uid_exists(self, uid):
                if self.get_by_uid(uid):