# HG changeset patch
# User Andrew Patterson <apatterson@gitlab.com>
# Date 1731628839 25200
#      Thu Nov 14 17:00:39 2024 -0700
# Node ID d4bce1d32866a0fefef4781b0a8edbadc58d7628
# Parent  4a41e8f80c71b0ceac6b1854b409186fb645f9d9
Disallow login for mattermost account

Change login shell for mattermost account to
nologin to stop CIS from triggering rule 6.2.8
"Ensure users' home directories permissions are
750 or more restrictive".

diff --git a/files/gitlab-cookbooks/mattermost/recipes/enable.rb b/files/gitlab-cookbooks/mattermost/recipes/enable.rb
--- a/files/gitlab-cookbooks/mattermost/recipes/enable.rb
+++ b/files/gitlab-cookbooks/mattermost/recipes/enable.rb
@@ -41,7 +41,7 @@
   ugid mattermost_group
   groupname mattermost_group
   gid mattermost_gid
-  shell '/bin/sh'
+  shell '/usr/sbin/nologin'
   home mattermost_home
   manage node['gitlab']['manage_accounts']['enable']
 end