Hi, a recent Debian bug sparkled a discussion whether cyrus (or other user cyrus-imapd runs as) need a shell? Debian packages create a cyrus user with disabled password, but nologin shell would add another layer on top of that.
Cheers, -- Ondřej Surý <ond...@sury.org> Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server Knot Resolver (https://www.knot-resolver.cz/) – secure, privacy-aware, fast DNS(SEC) resolver Vše pro chleba (https://vseprochleba.cz) – Mouky ze mlýna a potřeby pro pečení chleba všeho druhu