@test "Verify DSHELL in /etc/adduser.conf" {
run bash -c "grep '^DSHELL=/bin/false$' /etc/adduser.conf"
[ "$status" -eq 0 ]
}Set default shell to /bin/false in /etc/adduser.conf
Description
Set /bin/false as the default shell to be used for all new users.
Rationale
Require an administrative user to actively set a valid login shell.
Audit
Remediation
shell
sed -i 's/DSHELL=.*/DSHELL=\/bin\/false/' "/etc/adduser.conf"