autoinst.xml 27 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935
  1. <?xml version="1.0"?>
  2. <!DOCTYPE profile>
  3. <profile xmlns="http://www.suse.com/1.0/yast2ns" xmlns:config="http://www.suse.com/1.0/configns">
  4. <bootloader t="map">
  5. <global t="map">
  6. <append>splash=silent preempt=full mitigations=auto quiet security=apparmor</append>
  7. <cpu_mitigations>auto</cpu_mitigations>
  8. <gfxmode>auto</gfxmode>
  9. <hiddenmenu>false</hiddenmenu>
  10. <os_prober>true</os_prober>
  11. <secure_boot>true</secure_boot>
  12. <terminal>gfxterm</terminal>
  13. <timeout t="integer">8</timeout>
  14. <update_nvram>true</update_nvram>
  15. </global>
  16. <loader_type>grub2-efi</loader_type>
  17. </bootloader>
  18. <firewall t="map">
  19. <default_zone>public</default_zone>
  20. <enable_firewall t="boolean">true</enable_firewall>
  21. <log_denied_packets>off</log_denied_packets>
  22. <start_firewall t="boolean">true</start_firewall>
  23. <zones t="list">
  24. <zone t="map">
  25. <description>Unsolicited incoming network packets are rejected. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.</description>
  26. <interfaces t="list"/>
  27. <masquerade t="boolean">false</masquerade>
  28. <name>block</name>
  29. <ports t="list"/>
  30. <protocols t="list"/>
  31. <services t="list"/>
  32. <short>Block</short>
  33. <target>%%REJECT%%</target>
  34. </zone>
  35. <zone t="map">
  36. <description>For computers in your demilitarized zone that are publicly-accessible with limited access to your internal network. Only selected incoming connections are accepted.</description>
  37. <interfaces t="list"/>
  38. <masquerade t="boolean">false</masquerade>
  39. <name>dmz</name>
  40. <ports t="list"/>
  41. <protocols t="list"/>
  42. <services t="list">
  43. <service>ssh</service>
  44. </services>
  45. <short>DMZ</short>
  46. <target>default</target>
  47. </zone>
  48. <zone t="map">
  49. <description>All network connections are accepted.</description>
  50. <interfaces t="list">
  51. <interface>docker0</interface>
  52. </interfaces>
  53. <masquerade t="boolean">false</masquerade>
  54. <name>docker</name>
  55. <ports t="list"/>
  56. <protocols t="list"/>
  57. <services t="list"/>
  58. <short>docker</short>
  59. <target>ACCEPT</target>
  60. </zone>
  61. <zone t="map">
  62. <description>Unsolicited incoming network packets are dropped. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.</description>
  63. <interfaces t="list"/>
  64. <masquerade t="boolean">false</masquerade>
  65. <name>drop</name>
  66. <ports t="list"/>
  67. <protocols t="list"/>
  68. <services t="list"/>
  69. <short>Drop</short>
  70. <target>DROP</target>
  71. </zone>
  72. <zone t="map">
  73. <description>For use on external networks. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  74. <interfaces t="list"/>
  75. <masquerade t="boolean">true</masquerade>
  76. <name>external</name>
  77. <ports t="list"/>
  78. <protocols t="list"/>
  79. <services t="list">
  80. <service>ssh</service>
  81. </services>
  82. <short>External</short>
  83. <target>default</target>
  84. </zone>
  85. <zone t="map">
  86. <description>For use in home areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  87. <interfaces t="list"/>
  88. <masquerade t="boolean">false</masquerade>
  89. <name>home</name>
  90. <ports t="list"/>
  91. <protocols t="list"/>
  92. <services t="list">
  93. <service>dhcpv6-client</service>
  94. <service>mdns</service>
  95. <service>samba-client</service>
  96. <service>ssh</service>
  97. </services>
  98. <short>Home</short>
  99. <target>default</target>
  100. </zone>
  101. <zone t="map">
  102. <description>For use on internal networks. You mostly trust the other computers on the networks to not harm your computer. Only selected incoming connections are accepted.</description>
  103. <interfaces t="list"/>
  104. <masquerade t="boolean">false</masquerade>
  105. <name>internal</name>
  106. <ports t="list"/>
  107. <protocols t="list"/>
  108. <services t="list">
  109. <service>dhcpv6-client</service>
  110. <service>mdns</service>
  111. <service>samba-client</service>
  112. <service>ssh</service>
  113. </services>
  114. <short>Internal</short>
  115. <target>default</target>
  116. </zone>
  117. <zone t="map">
  118. <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  119. <interfaces t="list">
  120. <interface>eth0</interface>
  121. </interfaces>
  122. <masquerade t="boolean">false</masquerade>
  123. <name>public</name>
  124. <ports t="list"/>
  125. <protocols t="list"/>
  126. <services t="list">
  127. <service>dhcpv6-client</service>
  128. <service>ssh</service>
  129. </services>
  130. <short>Public</short>
  131. <target>default</target>
  132. </zone>
  133. <zone t="map">
  134. <description>All network connections are accepted.</description>
  135. <interfaces t="list"/>
  136. <masquerade t="boolean">false</masquerade>
  137. <name>trusted</name>
  138. <ports t="list"/>
  139. <protocols t="list"/>
  140. <services t="list"/>
  141. <short>Trusted</short>
  142. <target>ACCEPT</target>
  143. </zone>
  144. <zone t="map">
  145. <description>For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  146. <interfaces t="list"/>
  147. <masquerade t="boolean">false</masquerade>
  148. <name>work</name>
  149. <ports t="list"/>
  150. <protocols t="list"/>
  151. <services t="list">
  152. <service>dhcpv6-client</service>
  153. <service>ssh</service>
  154. </services>
  155. <short>Work</short>
  156. <target>default</target>
  157. </zone>
  158. </zones>
  159. </firewall>
  160. <general t="map">
  161. <mode t="map">
  162. <confirm t="boolean">false</confirm>
  163. </mode>
  164. </general>
  165. <groups t="list">
  166. <group t="map">
  167. <gid>100</gid>
  168. <groupname>users</groupname>
  169. <userlist/>
  170. </group>
  171. <group t="map">
  172. <gid>499</gid>
  173. <groupname>messagebus</groupname>
  174. <userlist/>
  175. </group>
  176. <group t="map">
  177. <gid>1</gid>
  178. <groupname>bin</groupname>
  179. <userlist>daemon</userlist>
  180. </group>
  181. <group t="map">
  182. <gid>488</gid>
  183. <groupname>input</groupname>
  184. <userlist/>
  185. </group>
  186. <group t="map">
  187. <gid>495</gid>
  188. <groupname>kmem</groupname>
  189. <userlist/>
  190. </group>
  191. <group t="map">
  192. <gid>493</gid>
  193. <groupname>utmp</groupname>
  194. <userlist/>
  195. </group>
  196. <group t="map">
  197. <gid>62</gid>
  198. <groupname>man</groupname>
  199. <userlist/>
  200. </group>
  201. <group t="map">
  202. <gid>477</gid>
  203. <groupname>polkitd</groupname>
  204. <userlist/>
  205. </group>
  206. <group t="map">
  207. <gid>479</gid>
  208. <groupname>systemd-timesync</groupname>
  209. <userlist/>
  210. </group>
  211. <group t="map">
  212. <gid>2</gid>
  213. <groupname>daemon</groupname>
  214. <userlist/>
  215. </group>
  216. <group t="map">
  217. <gid>480</gid>
  218. <groupname>systemd-network</groupname>
  219. <userlist/>
  220. </group>
  221. <group t="map">
  222. <gid>71</gid>
  223. <groupname>ntadmin</groupname>
  224. <userlist/>
  225. </group>
  226. <group t="map">
  227. <gid>490</gid>
  228. <groupname>dialout</groupname>
  229. <userlist/>
  230. </group>
  231. <group t="map">
  232. <gid>59</gid>
  233. <groupname>maildrop</groupname>
  234. <userlist>postfix</userlist>
  235. </group>
  236. <group t="map">
  237. <gid>478</gid>
  238. <groupname>nscd</groupname>
  239. <userlist/>
  240. </group>
  241. <group t="map">
  242. <gid>51</gid>
  243. <groupname>postfix</groupname>
  244. <userlist/>
  245. </group>
  246. <group t="map">
  247. <gid>485</gid>
  248. <groupname>tape</groupname>
  249. <userlist/>
  250. </group>
  251. <group t="map">
  252. <gid>487</gid>
  253. <groupname>render</groupname>
  254. <userlist/>
  255. </group>
  256. <group t="map">
  257. <gid>476</gid>
  258. <groupname>sshd</groupname>
  259. <userlist/>
  260. </group>
  261. <group t="map">
  262. <gid>491</gid>
  263. <groupname>cdrom</groupname>
  264. <userlist/>
  265. </group>
  266. <group t="map">
  267. <gid>486</gid>
  268. <groupname>sgx</groupname>
  269. <userlist/>
  270. </group>
  271. <group t="map">
  272. <gid>0</gid>
  273. <groupname>root</groupname>
  274. <userlist/>
  275. </group>
  276. <group t="map">
  277. <gid>489</gid>
  278. <groupname>disk</groupname>
  279. <userlist/>
  280. </group>
  281. <group t="map">
  282. <gid>15</gid>
  283. <groupname>shadow</groupname>
  284. <userlist/>
  285. </group>
  286. <group t="map">
  287. <gid>484</gid>
  288. <groupname>video</groupname>
  289. <userlist/>
  290. </group>
  291. <group t="map">
  292. <gid>496</gid>
  293. <groupname>wheel</groupname>
  294. <userlist/>
  295. </group>
  296. <group t="map">
  297. <gid>483</gid>
  298. <groupname>audit</groupname>
  299. <userlist/>
  300. </group>
  301. <group t="map">
  302. <gid>498</gid>
  303. <groupname>mail</groupname>
  304. <userlist>postfix</userlist>
  305. </group>
  306. <group t="map">
  307. <gid>5</gid>
  308. <groupname>tty</groupname>
  309. <userlist/>
  310. </group>
  311. <group t="map">
  312. <gid>65533</gid>
  313. <groupname>nogroup</groupname>
  314. <userlist/>
  315. </group>
  316. <group t="map">
  317. <gid>65534</gid>
  318. <groupname>nobody</groupname>
  319. <userlist/>
  320. </group>
  321. <group t="map">
  322. <gid>497</gid>
  323. <groupname>lp</groupname>
  324. <userlist/>
  325. </group>
  326. <group t="map">
  327. <gid>482</gid>
  328. <groupname>chrony</groupname>
  329. <userlist/>
  330. </group>
  331. <group t="map">
  332. <gid>492</gid>
  333. <groupname>audio</groupname>
  334. <userlist/>
  335. </group>
  336. <group t="map">
  337. <gid>494</gid>
  338. <groupname>lock</groupname>
  339. <userlist/>
  340. </group>
  341. <group t="map">
  342. <gid>36</gid>
  343. <groupname>kvm</groupname>
  344. <userlist/>
  345. </group>
  346. <group t="map">
  347. <gid>42</gid>
  348. <groupname>trusted</groupname>
  349. <userlist/>
  350. </group>
  351. <group t="map">
  352. <gid>481</gid>
  353. <groupname>systemd-journal</groupname>
  354. <userlist/>
  355. </group>
  356. </groups>
  357. <host t="map">
  358. <hosts t="list">
  359. <hosts_entry t="map">
  360. <host_address>127.0.0.1</host_address>
  361. <names t="list">
  362. <name>localhost</name>
  363. </names>
  364. </hosts_entry>
  365. <hosts_entry t="map">
  366. <host_address>::1</host_address>
  367. <names t="list">
  368. <name>localhost ipv6-localhost ipv6-loopback</name>
  369. </names>
  370. </hosts_entry>
  371. <hosts_entry t="map">
  372. <host_address>fe00::0</host_address>
  373. <names t="list">
  374. <name>ipv6-localnet</name>
  375. </names>
  376. </hosts_entry>
  377. <hosts_entry t="map">
  378. <host_address>ff00::0</host_address>
  379. <names t="list">
  380. <name>ipv6-mcastprefix</name>
  381. </names>
  382. </hosts_entry>
  383. <hosts_entry t="map">
  384. <host_address>ff02::1</host_address>
  385. <names t="list">
  386. <name>ipv6-allnodes</name>
  387. </names>
  388. </hosts_entry>
  389. <hosts_entry t="map">
  390. <host_address>ff02::2</host_address>
  391. <names t="list">
  392. <name>ipv6-allrouters</name>
  393. </names>
  394. </hosts_entry>
  395. <hosts_entry t="map">
  396. <host_address>ff02::3</host_address>
  397. <names t="list">
  398. <name>ipv6-allhosts</name>
  399. </names>
  400. </hosts_entry>
  401. </hosts>
  402. </host>
  403. <language t="map">
  404. <language>en_GB</language>
  405. <languages>en_GB</languages>
  406. </language>
  407. <networking t="map">
  408. <dhcp_options t="map">
  409. <dhclient_client_id/>
  410. <dhclient_hostname_option>AUTO</dhclient_hostname_option>
  411. </dhcp_options>
  412. <dns t="map">
  413. <dhcp_hostname t="boolean">true</dhcp_hostname>
  414. <hostname>localhost</hostname>
  415. <resolv_conf_policy>auto</resolv_conf_policy>
  416. </dns>
  417. <interfaces t="list">
  418. <interface t="map">
  419. <bootproto>dhcp</bootproto>
  420. <name>eth0</name>
  421. <startmode>auto</startmode>
  422. <zone>public</zone>
  423. </interface>
  424. </interfaces>
  425. <ipv6 t="boolean">true</ipv6>
  426. <keep_install_network t="boolean">true</keep_install_network>
  427. <managed t="boolean">false</managed>
  428. <routing t="map">
  429. <ipv4_forward t="boolean">false</ipv4_forward>
  430. <ipv6_forward t="boolean">false</ipv6_forward>
  431. </routing>
  432. </networking>
  433. <ntp-client t="map">
  434. <ntp_policy>auto</ntp_policy>
  435. <ntp_servers t="list"/>
  436. <ntp_sync>systemd</ntp_sync>
  437. </ntp-client>
  438. <partitioning t="list">
  439. <drive t="map">
  440. <device>/dev/vda</device>
  441. <disklabel>gpt</disklabel>
  442. <enable_snapshots t="boolean">false</enable_snapshots>
  443. <partitions t="list">
  444. <partition t="map">
  445. <create t="boolean">true</create>
  446. <filesystem t="symbol">vfat</filesystem>
  447. <format t="boolean">true</format>
  448. <fstopt>utf8</fstopt>
  449. <mount>/boot/efi</mount>
  450. <mountby t="symbol">uuid</mountby>
  451. <partition_id t="integer">259</partition_id>
  452. <partition_nr t="integer">1</partition_nr>
  453. <resize t="boolean">false</resize>
  454. <size>134217728</size>
  455. </partition>
  456. <partition t="map">
  457. <create t="boolean">true</create>
  458. <create_subvolumes t="boolean">true</create_subvolumes>
  459. <filesystem t="symbol">btrfs</filesystem>
  460. <format t="boolean">true</format>
  461. <mount>/</mount>
  462. <mountby t="symbol">uuid</mountby>
  463. <partition_id t="integer">131</partition_id>
  464. <partition_nr t="integer">2</partition_nr>
  465. <quotas t="boolean">false</quotas>
  466. <resize t="boolean">false</resize>
  467. <size>6307167744</size>
  468. <subvolumes t="list">
  469. <subvolume t="map">
  470. <copy_on_write t="boolean">false</copy_on_write>
  471. <path>var</path>
  472. </subvolume>
  473. <subvolume t="map">
  474. <copy_on_write t="boolean">true</copy_on_write>
  475. <path>usr/local</path>
  476. </subvolume>
  477. <subvolume t="map">
  478. <copy_on_write t="boolean">true</copy_on_write>
  479. <path>tmp</path>
  480. </subvolume>
  481. <subvolume t="map">
  482. <copy_on_write t="boolean">true</copy_on_write>
  483. <path>srv</path>
  484. </subvolume>
  485. <subvolume t="map">
  486. <copy_on_write t="boolean">true</copy_on_write>
  487. <path>root</path>
  488. </subvolume>
  489. <subvolume t="map">
  490. <copy_on_write t="boolean">true</copy_on_write>
  491. <path>opt</path>
  492. </subvolume>
  493. <subvolume t="map">
  494. <copy_on_write t="boolean">true</copy_on_write>
  495. <path>home</path>
  496. </subvolume>
  497. <subvolume t="map">
  498. <copy_on_write t="boolean">true</copy_on_write>
  499. <path>boot/grub2/arm64-efi</path>
  500. </subvolume>
  501. </subvolumes>
  502. <subvolumes_prefix>@</subvolumes_prefix>
  503. </partition>
  504. </partitions>
  505. <type t="symbol">CT_DISK</type>
  506. <use>all</use>
  507. </drive>
  508. </partitioning>
  509. <proxy t="map">
  510. <enabled t="boolean">false</enabled>
  511. </proxy>
  512. <services-manager t="map">
  513. <default_target>multi-user</default_target>
  514. <services t="map">
  515. <enable t="list">
  516. <service>YaST2-Firstboot</service>
  517. <service>YaST2-Second-Stage</service>
  518. <service>apparmor</service>
  519. <service>auditd</service>
  520. <service>klog</service>
  521. <service>chronyd</service>
  522. <service>cron</service>
  523. <service>cups</service>
  524. <service>firewalld</service>
  525. <service>wickedd-auto4</service>
  526. <service>wickedd-dhcp4</service>
  527. <service>wickedd-dhcp6</service>
  528. <service>wickedd-nanny</service>
  529. <service>irqbalance</service>
  530. <service>issue-generator</service>
  531. <service>kbdsettings</service>
  532. <service>wicked</service>
  533. <service>nscd</service>
  534. <service>postfix</service>
  535. <service>purge-kernels</service>
  536. <service>rsyslog</service>
  537. <service>smartd</service>
  538. <service>sshd</service>
  539. <service>systemd-pstore</service>
  540. <service>systemd-remount-fs</service>
  541. </enable>
  542. </services>
  543. </services-manager>
  544. <software t="map">
  545. <install_recommended t="boolean">true</install_recommended>
  546. <instsource/>
  547. <packages t="list">
  548. <package>wicked</package>
  549. <package>shim</package>
  550. <package>os-prober</package>
  551. <package>openssh</package>
  552. <package>openSUSE-release</package>
  553. <package>mokutil</package>
  554. <package>kexec-tools</package>
  555. <package>grub2-arm64-efi</package>
  556. <package>glibc</package>
  557. <package>firewalld</package>
  558. <package>e2fsprogs</package>
  559. <package>dosfstools</package>
  560. <package>chrony</package>
  561. <package>btrfsprogs</package>
  562. <package>autoyast2</package>
  563. </packages>
  564. <patterns t="list">
  565. <pattern>apparmor</pattern>
  566. <pattern>base</pattern>
  567. <pattern>documentation</pattern>
  568. <pattern>enhanced_base</pattern>
  569. <pattern>minimal_base</pattern>
  570. <pattern>sw_management</pattern>
  571. <pattern>yast2_basis</pattern>
  572. </patterns>
  573. <products t="list">
  574. <product>Leap</product>
  575. </products>
  576. </software>
  577. <ssh_import t="map">
  578. <copy_config t="boolean">false</copy_config>
  579. <import t="boolean">false</import>
  580. </ssh_import>
  581. <user_defaults t="map">
  582. <expire/>
  583. <group>100</group>
  584. <home>/home</home>
  585. <inactive>-1</inactive>
  586. <shell>/bin/bash</shell>
  587. <umask>022</umask>
  588. </user_defaults>
  589. <users t="list">
  590. <user t="map">
  591. <authorized_keys t="list"/>
  592. <encrypted t="boolean">true</encrypted>
  593. <fullname>user</fullname>
  594. <gid>100</gid>
  595. <home>/home/user</home>
  596. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  597. <password_settings t="map">
  598. <expire/>
  599. <flag/>
  600. <inact/>
  601. <max>99999</max>
  602. <min>0</min>
  603. <warn>7</warn>
  604. </password_settings>
  605. <shell>/bin/bash</shell>
  606. <uid>1000</uid>
  607. <user_password>$6$WV8CB/c6j0zhAi5S$4euhbt4alH7WNfaatS9IJgPiiKDJ48d5Ru1zCZCA0N9GiyOPuefN2PAUWlyYeTgqAInpyvPh1frdp4fFVjvEn0</user_password>
  608. <username>user</username>
  609. </user>
  610. <user t="map">
  611. <encrypted t="boolean">true</encrypted>
  612. <fullname>User for nscd</fullname>
  613. <gid>478</gid>
  614. <home>/run/nscd</home>
  615. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  616. <password_settings t="map">
  617. <expire/>
  618. <flag/>
  619. <inact/>
  620. <max/>
  621. <min/>
  622. <warn/>
  623. </password_settings>
  624. <shell>/sbin/nologin</shell>
  625. <uid>478</uid>
  626. <user_password>!</user_password>
  627. <username>nscd</username>
  628. </user>
  629. <user t="map">
  630. <encrypted t="boolean">true</encrypted>
  631. <fullname>systemd Network Management</fullname>
  632. <gid>480</gid>
  633. <home>/</home>
  634. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  635. <password_settings t="map">
  636. <expire/>
  637. <flag/>
  638. <inact/>
  639. <max/>
  640. <min/>
  641. <warn/>
  642. </password_settings>
  643. <shell>/usr/sbin/nologin</shell>
  644. <uid>480</uid>
  645. <user_password>!*</user_password>
  646. <username>systemd-network</username>
  647. </user>
  648. <user t="map">
  649. <encrypted t="boolean">true</encrypted>
  650. <fullname>Daemon</fullname>
  651. <gid>2</gid>
  652. <home>/sbin</home>
  653. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  654. <password_settings t="map">
  655. <expire/>
  656. <flag/>
  657. <inact/>
  658. <max/>
  659. <min/>
  660. <warn/>
  661. </password_settings>
  662. <shell>/usr/sbin/nologin</shell>
  663. <uid>2</uid>
  664. <user_password>!</user_password>
  665. <username>daemon</username>
  666. </user>
  667. <user t="map">
  668. <encrypted t="boolean">true</encrypted>
  669. <fullname>systemd Time Synchronization</fullname>
  670. <gid>479</gid>
  671. <home>/</home>
  672. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  673. <password_settings t="map">
  674. <expire/>
  675. <flag/>
  676. <inact/>
  677. <max/>
  678. <min/>
  679. <warn/>
  680. </password_settings>
  681. <shell>/usr/sbin/nologin</shell>
  682. <uid>479</uid>
  683. <user_password>!*</user_password>
  684. <username>systemd-timesync</username>
  685. </user>
  686. <user t="map">
  687. <encrypted t="boolean">true</encrypted>
  688. <fullname>user for rpcbind</fullname>
  689. <gid>65534</gid>
  690. <home>/var/lib/empty</home>
  691. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  692. <password_settings t="map">
  693. <expire/>
  694. <flag/>
  695. <inact/>
  696. <max/>
  697. <min/>
  698. <warn/>
  699. </password_settings>
  700. <shell>/sbin/nologin</shell>
  701. <uid>475</uid>
  702. <user_password>!</user_password>
  703. <username>rpc</username>
  704. </user>
  705. <user t="map">
  706. <encrypted t="boolean">true</encrypted>
  707. <fullname>SSH daemon</fullname>
  708. <gid>476</gid>
  709. <home>/var/lib/sshd</home>
  710. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  711. <password_settings t="map">
  712. <expire/>
  713. <flag/>
  714. <inact/>
  715. <max/>
  716. <min/>
  717. <warn/>
  718. </password_settings>
  719. <shell>/usr/sbin/nologin</shell>
  720. <uid>476</uid>
  721. <user_password>!</user_password>
  722. <username>sshd</username>
  723. </user>
  724. <user t="map">
  725. <encrypted t="boolean">true</encrypted>
  726. <fullname>Postfix Daemon</fullname>
  727. <gid>51</gid>
  728. <home>/var/spool/postfix</home>
  729. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  730. <password_settings t="map">
  731. <expire/>
  732. <flag/>
  733. <inact/>
  734. <max/>
  735. <min/>
  736. <warn/>
  737. </password_settings>
  738. <shell>/usr/sbin/nologin</shell>
  739. <uid>51</uid>
  740. <user_password>!</user_password>
  741. <username>postfix</username>
  742. </user>
  743. <user t="map">
  744. <encrypted t="boolean">true</encrypted>
  745. <fullname>NFS statd daemon</fullname>
  746. <gid>65533</gid>
  747. <home>/var/lib/nfs</home>
  748. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  749. <password_settings t="map">
  750. <expire/>
  751. <flag/>
  752. <inact/>
  753. <max/>
  754. <min/>
  755. <warn/>
  756. </password_settings>
  757. <shell>/sbin/nologin</shell>
  758. <uid>474</uid>
  759. <user_password>!</user_password>
  760. <username>statd</username>
  761. </user>
  762. <user t="map">
  763. <encrypted t="boolean">true</encrypted>
  764. <fullname>bin</fullname>
  765. <gid>1</gid>
  766. <home>/bin</home>
  767. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  768. <password_settings t="map">
  769. <expire/>
  770. <flag/>
  771. <inact/>
  772. <max/>
  773. <min/>
  774. <warn/>
  775. </password_settings>
  776. <shell>/usr/sbin/nologin</shell>
  777. <uid>1</uid>
  778. <user_password>!</user_password>
  779. <username>bin</username>
  780. </user>
  781. <user t="map">
  782. <authorized_keys t="list"/>
  783. <encrypted t="boolean">true</encrypted>
  784. <fullname>root</fullname>
  785. <gid>0</gid>
  786. <home>/root</home>
  787. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  788. <password_settings t="map">
  789. <expire/>
  790. <flag/>
  791. <inact/>
  792. <max/>
  793. <min/>
  794. <warn/>
  795. </password_settings>
  796. <shell>/bin/bash</shell>
  797. <uid>0</uid>
  798. <user_password>$6$zAe5W7gw/kja9aKy$mM.BWtNyjalXrDNig4CUfN3bgfmehUIs8.zvBwWn1XroK104G.rY3lyup3OH8TujieUmgO4J74Df.LktV4A1K1</user_password>
  799. <username>root</username>
  800. </user>
  801. <user t="map">
  802. <encrypted t="boolean">true</encrypted>
  803. <fullname>User for D-Bus</fullname>
  804. <gid>499</gid>
  805. <home>/run/dbus</home>
  806. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  807. <password_settings t="map">
  808. <expire/>
  809. <flag/>
  810. <inact/>
  811. <max/>
  812. <min/>
  813. <warn/>
  814. </password_settings>
  815. <shell>/usr/bin/false</shell>
  816. <uid>499</uid>
  817. <user_password>!</user_password>
  818. <username>messagebus</username>
  819. </user>
  820. <user t="map">
  821. <encrypted t="boolean">true</encrypted>
  822. <fullname>Manual pages viewer</fullname>
  823. <gid>62</gid>
  824. <home>/var/lib/empty</home>
  825. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  826. <password_settings t="map">
  827. <expire/>
  828. <flag/>
  829. <inact/>
  830. <max/>
  831. <min/>
  832. <warn/>
  833. </password_settings>
  834. <shell>/usr/sbin/nologin</shell>
  835. <uid>13</uid>
  836. <user_password>!</user_password>
  837. <username>man</username>
  838. </user>
  839. <user t="map">
  840. <encrypted t="boolean">true</encrypted>
  841. <fullname>Printing daemon</fullname>
  842. <gid>497</gid>
  843. <home>/var/spool/lpd</home>
  844. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  845. <password_settings t="map">
  846. <expire/>
  847. <flag/>
  848. <inact/>
  849. <max/>
  850. <min/>
  851. <warn/>
  852. </password_settings>
  853. <shell>/usr/sbin/nologin</shell>
  854. <uid>497</uid>
  855. <user_password>!</user_password>
  856. <username>lp</username>
  857. </user>
  858. <user t="map">
  859. <encrypted t="boolean">true</encrypted>
  860. <fullname>User for polkitd</fullname>
  861. <gid>477</gid>
  862. <home>/var/lib/polkit</home>
  863. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  864. <password_settings t="map">
  865. <expire/>
  866. <flag/>
  867. <inact/>
  868. <max/>
  869. <min/>
  870. <warn/>
  871. </password_settings>
  872. <shell>/usr/sbin/nologin</shell>
  873. <uid>477</uid>
  874. <user_password>!</user_password>
  875. <username>polkitd</username>
  876. </user>
  877. <user t="map">
  878. <encrypted t="boolean">true</encrypted>
  879. <fullname>Chrony Daemon</fullname>
  880. <gid>482</gid>
  881. <home>/var/lib/chrony</home>
  882. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  883. <password_settings t="map">
  884. <expire/>
  885. <flag/>
  886. <inact/>
  887. <max/>
  888. <min/>
  889. <warn/>
  890. </password_settings>
  891. <shell>/usr/sbin/nologin</shell>
  892. <uid>496</uid>
  893. <user_password>!</user_password>
  894. <username>chrony</username>
  895. </user>
  896. <user t="map">
  897. <encrypted t="boolean">true</encrypted>
  898. <fullname>nobody</fullname>
  899. <gid>65534</gid>
  900. <home>/var/lib/nobody</home>
  901. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  902. <password_settings t="map">
  903. <expire/>
  904. <flag/>
  905. <inact/>
  906. <max/>
  907. <min/>
  908. <warn/>
  909. </password_settings>
  910. <shell>/bin/bash</shell>
  911. <uid>65534</uid>
  912. <user_password>!</user_password>
  913. <username>nobody</username>
  914. </user>
  915. <user t="map">
  916. <encrypted t="boolean">true</encrypted>
  917. <fullname>Mailer daemon</fullname>
  918. <gid>498</gid>
  919. <home>/var/spool/clientmqueue</home>
  920. <home_btrfs_subvolume t="boolean">false</home_btrfs_subvolume>
  921. <password_settings t="map">
  922. <expire/>
  923. <flag/>
  924. <inact/>
  925. <max/>
  926. <min/>
  927. <warn/>
  928. </password_settings>
  929. <shell>/usr/sbin/nologin</shell>
  930. <uid>498</uid>
  931. <user_password>!</user_password>
  932. <username>mail</username>
  933. </user>
  934. </users>
  935. </profile>