Werk #19031: Use nologin for Linux agent user's login shell

Component

Checks & agents

Title

Use nologin for Linux agent user's login shell

Date

Jan 5, 2026

Level

Trivial Change

Class

New Feature

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.6.0b1 Not yet released	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.5.0b1 Not yet released	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.4.0p19	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

The Linux agent user's login shell is now set to nologin rather than /bin/false where nologin is available. Otherwise /bin/false will be used as before.

This change improves compliance with security benchmarks such as the CIS benchmark for RHEL.

To the list of all Werks