Werk #19031: Use nologin for Linux agent user's login shell

Component

Checks & agents

Title

Use nologin for Linux agent user's login shell

Date

Jan 5, 2026

Level

Trivial Change

Class

New Feature

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.6.0b1 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT
2.5.0b1	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT
2.4.0p19	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Ultimate MT

The Linux agent user's login shell is now set to nologin rather than /bin/false where nologin is available. Otherwise /bin/false will be used as before.

This change improves compliance with security benchmarks such as the CIS benchmark for RHEL.

To the list of all Werks