From 4f18d968a9bf232ef01288bc8ae5ed43d8d88ebc Mon Sep 17 00:00:00 2001
From: Philip Meulengracht <philip.meulengracht@canonical.com>
Date: Fri, 16 Feb 2024 12:24:21 +0100
Subject: [PATCH] asserts: update username regex allowed by system-user
 assertion (#13590)

* asserts: update username regex allowed by system-user assertion

* asserts: drop the second '-' from the regex
---
 asserts/system_user.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/asserts/system_user.go b/asserts/system_user.go
index eac833b8bb2..83ea08a4874 100644
--- a/asserts/system_user.go
+++ b/asserts/system_user.go
@@ -28,7 +28,8 @@ import (
 	"time"
 )
 
-var validSystemUserUsernames = regexp.MustCompile(`^[a-z0-9][-a-z0-9+.-_]*$`)
+// validSystemUserUsernames matches the regex we allow by osutil/user.go:IsValidUsername
+var validSystemUserUsernames = regexp.MustCompile(`^[a-z0-9][-a-z0-9._]*$`)
 
 // SystemUser holds a system-user assertion which allows creating local
 // system users.