2de3ab
diff -up shadow-4.9/src/useradd.c.redhat shadow-4.9/src/useradd.c
2de3ab
--- shadow-4.9/src/useradd.c.redhat	2021-07-22 23:55:35.000000000 +0200
2de3ab
+++ shadow-4.9/src/useradd.c	2021-08-02 11:45:11.942867250 +0200
2de3ab
@@ -104,7 +104,7 @@ FILE *shadow_logfd = NULL;
2de3ab
 static gid_t def_group = 1000;
2de3ab
 static const char *def_gname = "other";
2de3ab
 static const char *def_home = "/home";
2de3ab
-static const char *def_shell = "/bin/bash";
2de3ab
+static const char *def_shell = "/sbin/nologin";
2de3ab
 static const char *def_template = SKEL_DIR;
2de3ab
 static const char *def_create_mail_spool = "yes";
2de3ab
 
2de3ab
@@ -114,7 +114,7 @@ static const char *def_expire = "";
2de3ab
 #define	VALID(s)	(strcspn (s, ":\n") == strlen (s))
2de3ab
 
2de3ab
 static const char *user_name = "";
2de3ab
-static const char *user_pass = "!";
2de3ab
+static const char *user_pass = "!!";
2de3ab
 static uid_t user_id;
2de3ab
 static gid_t user_gid;
2de3ab
 static const char *user_comment = "";
2de3ab
@@ -1204,9 +1204,9 @@ static void process_flags (int argc, cha
2de3ab
 		};
2de3ab
 		while ((c = getopt_long (argc, argv,
2de3ab
 #ifdef WITH_SELINUX
2de3ab
-		                         "b:c:d:De:f:g:G:hk:K:lmMNop:rR:P:s:u:UZ:",
2de3ab
+		                         "b:c:d:De:f:g:G:hk:K:lmMnNop:rR:P:s:u:UZ:",
2de3ab
 #else				/* !WITH_SELINUX */
2de3ab
-		                         "b:c:d:De:f:g:G:hk:K:lmMNop:rR:P:s:u:U",
2de3ab
+		                         "b:c:d:De:f:g:G:hk:K:lmMnNop:rR:P:s:u:U",
2de3ab
 #endif				/* !WITH_SELINUX */
2de3ab
 		                         long_options, NULL)) != -1) {
2de3ab
 			switch (c) {
2de3ab
@@ -1363,6 +1363,7 @@ static void process_flags (int argc, cha
2de3ab
 			case 'M':
2de3ab
 				Mflg = true;
2de3ab
 				break;
2de3ab
+			case 'n':
2de3ab
 			case 'N':
2de3ab
 				Nflg = true;
2de3ab
 				break;