From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sun, 10 Aug 2025 13:09:52 +0000 (+0000)
Subject: accounts: Don't allow to register accounts containing the word "ipfire"
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=refs%2Fheads%2Fmaster;p=ipfire.org.git

accounts: Don't allow to register accounts containing the word "ipfire"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/backend/accounts.py b/src/backend/accounts.py
index 21181e22..659df06c 100644
--- a/src/backend/accounts.py
+++ b/src/backend/accounts.py
@@ -349,10 +349,14 @@ class Accounts(Object):
 	def uid_is_valid(self, uid):
 		# https://unix.stackexchange.com/questions/157426/what-is-the-regex-to-validate-linux-users
 		m = re.match(r"^[a-z_][a-z0-9_-]{3,31}$", uid)
-		if m:
-			return True
+		if m is None:
+			return False
 
-		return False
+		# UID cannot contain "ipfire"
+		if "ipfire" in uid:
+			return False
+
+		return True
 
 	def uid_exists(self, uid):
 		if self.get_by_uid(uid):