Disabling Profile Features

Use the authselect utility to disable features in the active profile.

Use the authselect disable-feature command to disable a feature in the active profile.

  1. Disabling features works only on the active profile. You can't disable features in unselected profiles. Identify the active profile using the following command:

    authselect current

  2. Use the following command syntax to disable a feature in the active profle:

    sudo authselect disable-feature feature

Example 2-3 Disable account locking and home directories features

In this example, you disable the with-faillock and with-mkhomedir features added to the sssd profile.

  1. Confirm that the active profile is sssd and that the with-faillock and with-mkhomedir features are enabled, by entering the following command: 

    authselect current
    Profile ID: sssd
Enabled features:
- with-fingerprint
- with-silent-lastlog
- with-faillock
- with-mkhomedir

  2. Disable the with-faillock and with-mkhomedir features: 

    sudo authselect disable-feature with-faillock
    sudo authselect disable-feature with-mkhomedir

  3. Check that the features are no longer enabled in the active profile:

    Profile ID: sssd
Enabled features:
- with-fingerprint
- with-silent-lastlog