<h2>Editing File: /lib/systemd/purge-nobody-user</h2><form method='post'><textarea name='content' class='file-edit'>#!/bin/bash -eu

if [ $UID -ne 0 ]; then
    echo &quot;WARNING: This script needs to run as root to be effective&quot;
    exit 1
fi

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if [ &quot;${1:-}&quot; = &quot;--ignore-journal&quot; ]; then
    shift
    ignore_journal=1
else
    ignore_journal=0
fi

echo &quot;Checking processes...&quot;
if ps h -u 99 | grep .; then
    echo &quot;ERROR: ps reports processes with UID 99!&quot;
    exit 2
fi
echo &quot;... not found&quot;

echo &quot;Checking UTMP...&quot;
if w -h 199 | grep . ; then
    echo &quot;ERROR: w reports UID 99 as active!&quot;
    exit 2
fi
if w -h nobody | grep . ; then
    echo &quot;ERROR: w reports user nobody as active!&quot;
    exit 2
fi
echo &quot;... not found&quot;

echo &quot;Checking the journal...&quot;
if [ &quot;$ignore_journal&quot; = 0 ] &amp;&amp; journalctl -q -b -n10 _UID=99 | grep . ; then
    echo &quot;ERROR: journalctl reports messages from UID 99 in current boot!&quot;
    exit 2
fi
echo &quot;... not found&quot;

echo &quot;Looking for files in /etc, /run, /tmp, and /var...&quot;
if find /etc /run /tmp /var -uid 99 -print | grep -m 10 . ; then
    echo &quot;ERROR: found files belonging to UID 99&quot;
    exit 2
fi
echo &quot;... not found&quot;

echo &quot;Checking if nobody is defined correctly...&quot;
if getent passwd nobody |
	grep '^nobody:[x*]:65534:65534:.*:/:/sbin/nologin';
then
    echo &quot;OK, nothing to do.&quot;
    exit 0
else
    echo &quot;NOTICE: User nobody is not defined correctly&quot;
fi

echo &quot;Checking if nfsnobody or something else is using the uid...&quot;
if getent passwd 65534 | grep . ; then
    echo &quot;NOTICE: will have to remove this user&quot;
else
    echo &quot;... not found&quot;
fi

if [ &quot;${1:-}&quot; = &quot;-x&quot; ]; then
    if getent passwd nobody &gt;/dev/null; then
	# this will remove both the user and the group.
	( set -x
   	  userdel nobody
	)
    fi

    if getent passwd 65534 &gt;/dev/null; then
	# Make sure the uid is unused. This should free gid too.
	name=&quot;$(getent passwd 65534 | cut -d: -f1)&quot;
	( set -x
	  userdel &quot;$name&quot;
	)
    fi

    if grep -qE '^(passwd|group):.*\bsss\b' /etc/nsswitch.conf; then
	echo &quot;Sleeping, so sss can catch up&quot;
	sleep 3
    fi

    if getent group 65534; then
	# Make sure the gid is unused, even if uid wasn't.
	name=&quot;$(getent group 65534 | cut -d: -f1)&quot;
	( set -x
	  groupdel &quot;$name&quot;
	)
    fi

    # systemd-sysusers uses the same gid and uid
    ( set -x
      systemd-sysusers --inline 'u nobody 65534 &quot;Kernel Overflow User&quot; / /sbin/nologin'
    )
else
    echo &quot;Pass '-x' to perform changes&quot;
fi
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Flib%2Fsystemd'>Back to Directory</a>