Propellor.Property.User

Documentation

data Eep

Constructors

YesReallyDeleteHome

accountFor :: User -> Property DebianLike

systemAccountFor :: User -> Property DebianLike

systemAccountFor' :: User -> Maybe FilePath -> Maybe Group -> Property DebianLike

nuked :: User -> Eep -> Property Linux

Removes user home directory!! Use with caution.

hasSomePassword :: User -> Property (HasInfo + DebianLike)

Only ensures that the user has some password set. It may or may not be a password from the PrivData.

hasSomePassword' :: IsContext c => User -> c -> Property (HasInfo + DebianLike)

While hasSomePassword uses the name of the host as context, this allows specifying a different context. This is useful when you want to use the same password on multiple hosts, for example.

hasPassword :: User -> Property (HasInfo + DebianLike)

Ensures that a user's password is set to a password from the PrivData. (Will change any existing password.)

A user's password can be stored in the PrivData in either of two forms; the full cleartext Password or a CryptPassword hash. The latter is obviously more secure.

hasPassword' :: IsContext c => User -> c -> Property (HasInfo + DebianLike)

setPassword :: (((PrivDataField, PrivData) -> Propellor Result) -> Propellor Result) -> Propellor Result

hasInsecurePassword :: User -> String -> Property DebianLike

Makes a user's password be the passed String. Highly insecure: The password is right there in your config file for anyone to see!

chpasswd :: User -> String -> [String] -> Propellor Result

lockedPassword :: User -> Property DebianLike

data PasswordStatus

Constructors

NoPassword

LockedPassword

HasPassword

Instances

Eq PasswordStatus

Methods

(==) :: PasswordStatus -> PasswordStatus -> Bool

(/=) :: PasswordStatus -> PasswordStatus -> Bool

getPasswordStatus :: User -> IO PasswordStatus

isLockedPassword :: User -> IO Bool

homedir :: User -> IO FilePath

hasGroup :: User -> Group -> Property DebianLike

hasDesktopGroups :: User -> Property DebianLike

Gives a user access to the secondary groups, including audio and video, that the OS installer normally gives a desktop user access to.

Note that some groups may only exit after installation of other software. When a group does not exist yet, the user won't be added to it.

shadowConfig :: Bool -> Property DebianLike

Controls whether shadow passwords are enabled or not.

shadowExists :: IO Bool

hasLoginShell :: User -> FilePath -> Property DebianLike

Ensures that a user has a specified login shell, and that the shell is enabled in etcshells.

shellSetTo :: User -> FilePath -> Property DebianLike

shellEnabled :: FilePath -> Property DebianLike

Ensures that etcshells contains a shell.