From 1d0158ab9036cff7737cbfb1678f876ae67c4ac2 Mon Sep 17 00:00:00 2001
From: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Date: Sun, 2 Apr 2023 23:23:26 -0400
Subject: services: xvnc: Do not create a regular HOME directory for xvnc user.

* gnu/services/vnc.scm (%xvnc-accounts)
[home-directory]: Define as /var/empty.
[shell]: Set to nologin, for good measures.
---
 gnu/services/vnc.scm | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gnu/services/vnc.scm b/gnu/services/vnc.scm
index 15c3c14fee..d57cf51af2 100644
--- a/gnu/services/vnc.scm
+++ b/gnu/services/vnc.scm
@@ -17,6 +17,7 @@
 ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
 
 (define-module (gnu services vnc)
+  #:use-module (gnu packages admin)
   #:use-module (gnu packages vnc)
   #:use-module ((gnu services) #:hide (delete))
   #:use-module (gnu system shadow)
@@ -191,7 +192,9 @@ (define %xvnc-accounts
          (name "xvnc")
          (group "xvnc")
          (system? #t)
-         (comment "User for Xvnc server"))))
+         (comment "User for Xvnc server")
+         (home-directory "/var/empty")
+         (shell (file-append shadow "/sbin/nologin")))))
 
 (define (xvnc-shepherd-service config)
   "Return a <shepherd-service> for Xvnc with CONFIG."
-- 
cgit v1.2.3