From b020eda9a45ef940aa70eb53633c1a2abcf8bd8e Mon Sep 17 00:00:00 2001 From: Joachim Wiberg Date: Mon, 12 Jan 2026 19:15:28 +0100 Subject: [PATCH] confd: prevent motd from showing on non-shell user login attempts Signed-off-by: Joachim Wiberg --- src/confd/src/system.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/confd/src/system.c b/src/confd/src/system.c index 3750c371..16ca790f 100644 --- a/src/confd/src/system.c +++ b/src/confd/src/system.c @@ -557,10 +557,14 @@ static void del_groups(const char *user, const char **groups) /* Users with a valid shell are also allowed CLI access */ static void adjust_access(const char *user, const char *shell) { - if (strcmp(shell, "/bin/false")) + if (strcmp(shell, "/bin/false")) { add_group(user, "klish"); - else + erasef("/home/%s/.hushlogin", user); + } else { del_group(user, "klish"); + /* prevent even motd from showing */ + touchf("/home/%s/.hushlogin", user); + } } /* XXX: Currently Infix only has admin and non-admins as a group */