I'd like to remove shell privileges from some of the system users on Debian, who all get a shell when you upgrade to or install Debian stable. I'd like to know which actually need shells to function. Currently, I'd like to perform the following actions:
chsh -s /bin/false daemon
chsh -s /bin/false bin
chsh -s /bin/false sys
chsh -s /bin/sync sync
chsh -s /bin/false games
chsh -s /bin/false man
chsh -s /bin/false lpd
chsh -s /bin/false lp
chsh -s /bin/false mail
chsh -s /bin/false news
chsh -s /bin/false uucp
chsh -s /bin/false proxy
chsh -s /bin/false postgres
chsh -s /bin/false www-data
chsh -s /bin/false backup
chsh -s /bin/false operator
chsh -s /bin/false list
chsh -s /bin/false ircd
chsh -s /bin/false gnats
chsh -s /bin/false nobody
Is this safe? I'm wondering about daemon, bin and sys in particular.