PWUPDD(8)

πŸ“¦
version 1.4.0 Β· 3 versions
, in ubuntu stonking

✨ PWUPDD(8) ✨

okay bestie, gather round, because we're talking about pwupdd β€” aka pwupdd.service, aka pwupdd.socket 🫢 she's a manual page, she lives in section 8, and she's here to update your passwd and shadow entries. no cap.


πŸ’– NAME πŸ’–

pwupdd, pwupdd.service, pwupdd.socket β€” update passwd and shadow entries

like. that's the whole vibe. account stuff gets updated. iconic behavior honestly.


🌸 SYNOPSIS 🌸

pwupdd.service
pwupdd.socket
/usr/libexec/pwupdd [OPTIONS...]

πŸ¦‹ DESCRIPTION πŸ¦‹

okay so here's the tea. pwupdd is an inetd(8) style, socket-activated service β€” which means every single time a request comes in, a whole fresh new instance of the daemon gets spun up. new request, new baby daemon. slay. πŸ”₯

she exposes a Varlink interface so that authorized users can go ahead and modify their own account data β€” passwords, login shells, GECOS field info, all of it. authentication is handled via PAM(8), so you know it's legit.

and then there's the root user, main character energy as always πŸ‘‘ β€” root gets to use some special methods to update any /etc/passwd or /etc/shadow entry. not just their own. everybody's. periodt.


πŸŽ€ OPTIONS πŸŽ€

  • -d, --debug β€” turn on debug mode ✨
  • -v, --verbose β€” turn on verbose logging, so she tells you everything she's doing πŸ’…
  • -?, --help β€” bestie just wants to give you the help list πŸ₯Ί
  • --version β€” prints the program version, no thoughts, just numbers

the service exposes the following methods via Varlink, and every single one of them is doing the most:

  • Chauthtok β€” changes the password for a provided user. authentication goes through PAM using the configuration pwupd-passwd. this one may be called by the root user or by the user who owns the record πŸ’–
  • Chfn β€” changes the finger (GECOS) information of a user. authentication goes through PAM using the configuration pwupd-chfn. same deal: root or the record's owner can call it 🫢
  • Chsh β€” changes the login shell of an account. authentication goes through PAM using the configuration pwupd-chsh. and yup, once again: root or the user owning the record 🌸
  • UpdatePasswdShadow β€” updates the passwd and shadow entry of a specified user. ⚠️ ONLY root is allowed to call this method. not your friend, not your mutual, not you. root only. periodt.

⭐ SEE ALSO ⭐

passwd(1), chfn(1), chsh(1), pam(8)


πŸ’€ heads up bestie: UpdatePasswdShadow is root-only, and the other three methods are gated to either root or the user who owns the record. PAM does the auth check, so don't skip her. she will know.

and that's the whole page, bestie πŸŽ€ this came to you from account-utils 1.4.0, dated 07/17/2026 β€” go update something responsibly, ily! πŸ’œπŸ§šπŸŒΊ

πŸ“¦ where this page comes from