PWUPDD(8)
β¨ PWUPDD(8) β¨
okay bestie, gather round, because we're talking about pwupdd β aka pwupdd.service, aka pwupdd.socket π«Ά she's a manual page, she lives in section 8, and she's here to update your passwd and shadow entries. no cap.
π NAME π
pwupdd, pwupdd.service, pwupdd.socket β update passwd and shadow entries
like. that's the whole vibe. account stuff gets updated. iconic behavior honestly.
πΈ SYNOPSIS πΈ
pwupdd.service
pwupdd.socket
/usr/libexec/pwupdd [OPTIONS...]
π¦ DESCRIPTION π¦
okay so here's the tea. pwupdd is an inetd(8) style, socket-activated service β which means every single time a request comes in, a whole fresh new instance of the daemon gets spun up. new request, new baby daemon. slay. π₯
she exposes a Varlink interface so that authorized users can go ahead and modify their own account data β passwords, login shells, GECOS field info, all of it. authentication is handled via PAM(8), so you know it's legit.
and then there's the root user, main character energy as always π β root gets to use some special methods to update any /etc/passwd or /etc/shadow entry. not just their own. everybody's. periodt.
π OPTIONS π
-d,--debugβ turn on debug mode β¨-v,--verboseβ turn on verbose logging, so she tells you everything she's doing π-?,--helpβ bestie just wants to give you the help list π₯Ί--versionβ prints the program version, no thoughts, just numbers
π VARLINK INTERFACES π
the service exposes the following methods via Varlink, and every single one of them is doing the most:
Chauthtokβ changes the password for a provided user. authentication goes through PAM using the configurationpwupd-passwd. this one may be called by the root user or by the user who owns the record πChfnβ changes the finger (GECOS) information of a user. authentication goes through PAM using the configurationpwupd-chfn. same deal: root or the record's owner can call it π«ΆChshβ changes the login shell of an account. authentication goes through PAM using the configurationpwupd-chsh. and yup, once again: root or the user owning the record πΈUpdatePasswdShadowβ updates the passwd and shadow entry of a specified user. β οΈ ONLY root is allowed to call this method. not your friend, not your mutual, not you. root only. periodt.
β SEE ALSO β
passwd(1), chfn(1), chsh(1), pam(8)
π heads up bestie: UpdatePasswdShadow is root-only, and the other three methods are gated to either root or the user who owns the record. PAM does the auth check, so don't skip her. she will know.
and that's the whole page, bestie π this came to you from account-utils 1.4.0, dated 07/17/2026 β go update something responsibly, ily! ππ§πΊ
π¦ where this page comes from
- ubuntu stonking: account-utils 1.4.0-1 Β· GPL-2.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms