passwd -l pi instead of -d

(would have still allowed password-less local login and change of user otherwise)
MarcoPiscopia · Dec 15, 2019 · 4673e33 · 4673e33
1 parent d6ae52f
commit 4673e33
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/setup b/setup
@@ -44,8 +44,8 @@ bash modules/openvpn/etc/scripts/platform/debian/setup.sh $ONBOARD_ROOT $ONBOARD
 
 if id -u pi 2> /dev/null; then # DO not show missing user error here...
  if id -u $ONBOARD_USER > /dev/null; then # ...but so show it here!
- echo 'Disabling password authentication for user "pi" (Raspberry PI).'
+ echo 'Disabling/locking user "pi" (Raspberry) for security reasons.'
  echo "We have the user '$ONBOARD_USER' instead."
- passwd -d pi
+ passwd -l pi
  fi
 fi