2.2 Give the BIND User Account an Invalid Shell


The BIND user account, named by default, must not be used as a regular login account, and should be assigned an invalid or nologin shell to ensure that the account cannot be used to login.


Service accounts such as the named account represent a risk if they can be used to get a login shell to the system.


Change the named account to use the nologin shell as shown:

# chsh -s /sbin/nologin named

Default Value:


See Also