From 1be8de6f5ca4c7e40f5999ce4f960010fc36acb1 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Thu, 28 Aug 2025 00:22:55 +0900 Subject: internal/app: less strict username regex Use the default value of NAME_REGEX from adduser. Should not hurt compatibility while being less strict. Signed-off-by: Ophestra --- internal/app/username.go | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 internal/app/username.go (limited to 'internal/app/username.go') diff --git a/internal/app/username.go b/internal/app/username.go new file mode 100644 index 00000000..566daf5f --- /dev/null +++ b/internal/app/username.go @@ -0,0 +1,12 @@ +package app + +import "regexp" + +// nameRegex is the default NAME_REGEX value from adduser. +var nameRegex = regexp.MustCompilePOSIX(`^[a-zA-Z][a-zA-Z0-9_-]*\$?$`) + +// isValidUsername returns whether the argument is a valid username +func isValidUsername(username string) bool { + return len(username) < sysconf(_SC_LOGIN_NAME_MAX) && + nameRegex.MatchString(username) +} -- cgit v1.3.1