Disabling Profile Features

Use the authselect utility to disable features in the active profile.

Use the authselect disable-feature command to disable a feature in the active profile.

1. Disabling features works only on the active profile. You can't disable features in unselected profiles. Identify the active profile using the following command:

   authselect current

2. Use the following command syntax to disable a feature in the active profle:

   sudo authselect disable-feature feature

Example 2-3 Disable account locking and home directories features

In this example, you disable the with-faillock and with-mkhomedir features added to the sssd profile.

1. Confirm that the active profile is sssd and that the with-faillock and with-mkhomedir features are enabled, by entering the following command:

   authselect current

   Profile ID: sssd
   Enabled features:
   - with-fingerprint
   - with-silent-lastlog
   - with-faillock
   - with-mkhomedir

2. Disable the with-faillock and with-mkhomedir features:

   sudo authselect disable-feature with-faillock

   sudo authselect disable-feature with-mkhomedir

3. Check that the features are no longer enabled in the active profile:

   Profile ID: sssd
   Enabled features:
   - with-fingerprint
   - with-silent-lastlog