From e6d675333dbd3b7a17ca37493c2ed4692caf0df6 Mon Sep 17 00:00:00 2001
From: Wojciech Kozlowski <wk@wojciechkozlowski.eu>
Date: Sun, 11 Sep 2022 20:00:08 +0200
Subject: [PATCH] Disable root shell

---
 machine.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/machine.yml b/machine.yml
index f18a57f..4e3483e 100644
--- a/machine.yml
+++ b/machine.yml
@@ -440,3 +440,12 @@
         mode: 0644
 
     # On first tmux launch install plugins with <Ctrl + a + I>
+
+    # ----------------------------------------------------------------------------------------------
+    # Set the root's shell to nologin.
+    # ----------------------------------------------------------------------------------------------
+
+    - name: Disable root shell
+      user:
+        name: root
+        shell: /usr/sbin/nologin