On Sun, 30 Jul 2017 21:32:53 +0200 Andreas Henriksson <andr...@fatal.se> wrote: > My general feeling is that we can likely get away with not shipping > any /etc/login.defs file at all if we want (or ship one with just > commented out examples).
The former, please; examples can go in /usr/share/doc. When trying to build minimal systems, and in particular stateless or near-stateless systems with configurations as close as possible to the default, it helps to not have packages shipping configuration files consisting entirely of comments.