# HG changeset patch # User Andrew Patterson <apatterson@gitlab.com> # Date 1731628839 25200 # Thu Nov 14 17:00:39 2024 -0700 # Node ID d4bce1d32866a0fefef4781b0a8edbadc58d7628 # Parent 4a41e8f80c71b0ceac6b1854b409186fb645f9d9 Disallow login for mattermost account Change login shell for mattermost account to nologin to stop CIS from triggering rule 6.2.8 "Ensure users' home directories permissions are 750 or more restrictive". diff --git a/files/gitlab-cookbooks/mattermost/recipes/enable.rb b/files/gitlab-cookbooks/mattermost/recipes/enable.rb --- a/files/gitlab-cookbooks/mattermost/recipes/enable.rb +++ b/files/gitlab-cookbooks/mattermost/recipes/enable.rb @@ -41,7 +41,7 @@ ugid mattermost_group groupname mattermost_group gid mattermost_gid - shell '/bin/sh' + shell '/usr/sbin/nologin' home mattermost_home manage node['gitlab']['manage_accounts']['enable'] end