Strings used to disable accounts ("usermod -Z") can be const AFAICT.
(Patched -current source compiled under syspatched 6.1 to check.)
Ross
Index: user.c
===================================================================
RCS file: /cvs/src/usr.sbin/user/user.c,v
retrieving revision 1.120
diff -u -p -r1.120 user.c
--- user.c 24 May 2017 09:18:15 -0000 1.120
+++ user.c 8 Sep 2017 09:59:07 -0000
@@ -1349,8 +1349,8 @@ moduser(char *login_name, char *newlogin
struct group *grp;
const char *homedir;
char buf[LINE_MAX];
- char acctlock_str[] = "-";
- char pwlock_str[] = "*";
+ const char acctlock_str[] = "-";
+ const char pwlock_str[] = "*";
char pw_len[PasswordLength + 1];
char shell_len[MaxShellNameLen];
char *shell_last_char;