Name Blacklist

Users have a 'name' attribute on their corresponding Person object. This is a short, unique ASCII name suitable for use in URLs and as a short identifier. It is also possible to login using this name. Ubuntites will also get <email address hidden> email addresses.

We want to stop users being able to change their names to known confusing or dangerous terms, such as 'root', 'administrator', 'ubuntu', 'canonical' etc. We also need to ensure that names do not conflict with any manually added email aliases in the @ubuntu.com domain or well known names required by RFCs such as 'abuse' or 'postmaster'.

This same blacklist should be used for other pillar names like project, product and distribution to avoid confusion and social engineering attacks.