[Rpm-maint] [rpm-software-management/rpm] sysusers.d `u!` should lock the account, not expire (Issue #3829)

[Panu Matilainen]

pmatilai created an issue (rpm-software-management/rpm#3829)

https://github.com/rpm-software-management/rpm/pull/3481 implemented sysusers.d `u!` as an expired account, but that doesn't match the upstream definition of it:

> Type u may be suffixed with an exclamation mark ("u!") to create a
fully locked account. This is recommended, since logins should
typically not be allowed for system users. With or without the
exclamation mark an invalid password is set. For "u!", the account
is also locked, which makes a difference for non-password forms of
authentication, such as SSH or similar.

So the `u!` operation maps to usermod -L (lock), not expiry. We should leave expiry alone and align to what systemd does. 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/3829
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/3829 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20250623/24559402/attachment.htm>