[gentoo-dev] [PATCH 9/9] acct-user.eclass: Refuse to lock out the superuser

[Ulrich Müller]

Signed-off-by: Ulrich Müller <u...@gentoo.org>
---
 eclass/acct-user.eclass | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/eclass/acct-user.eclass b/eclass/acct-user.eclass
index 2e2e1152f9ad..f2aaefc2ee39 100644
--- a/eclass/acct-user.eclass
+++ b/eclass/acct-user.eclass
@@ -473,6 +473,11 @@ acct-user_pkg_prerm() {
                return 0
        fi
 
+       if [[ ${ACCT_USER_ID} -eq 0 ]]; then
+               elog "Refusing to lock out the superuser (UID 0)"
+               return 0
+       fi
+
        if [[ -z ${REPLACED_BY_VERSION} ]]; then
                if [[ -z $(egetent passwd "${ACCT_USER_NAME}") ]]; then
                        ewarn "User account not found: ${ACCT_USER_NAME}"
-- 
2.35.1