OCI: Should a User Login Shell Be Disabled?

Applies to

Oracle Cloud Infrastructure - Version N/A and later 

Linux x86-64

Goal 

A 3rd party security tool reports that login shell should be disabled for some users in a OCI instance or a user want to . The users have shell login enabled with /bin/bash:

grid

oracle

oracle-client

opc

csctic

mqm

Actual users may vary across different distributions and different releases)

Can the shell login be disabled for these users?

Solution

Linux users present at the time of the instance creation should not be removed or modified in principle – this is the case for the opc user for Compute instances.