From bee137c6d9acfdde59b1160c2cf8af1309226a9a Mon Sep 17 00:00:00 2001
From: Adam Ierymenko <adam.ierymenko@zerotier.com>
Date: Mon, 15 Nov 2021 17:27:16 -0500
Subject: [PATCH] Set shell for ZeroTier service user account on Debian to
 /usr/sbin/nologin for GitHub issue #1492

---
 debian/postinst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/postinst b/debian/postinst
index 2e673aef9..b6e7471c4 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -3,7 +3,7 @@
 case "$1" in
   configure)
       if ! id zerotier-one >>/dev/null 2>&1; then
-        useradd --system --user-group --home-dir /var/lib/zerotier-one --no-create-home zerotier-one
+        useradd --system --user-group --home-dir /var/lib/zerotier-one --shell /usr/sbin/nologin --no-create-home zerotier-one
       fi
       ;;
 esac