News: 1774373346

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Age checks creep into Linux as systemd gets a DOB field

(2026/03/24)


After weeks of debate, code to record user age was finally merged into the Linux world's favorite system management daemon.

Pull request #40954 to the systemd project is titled " [1]userdb: add birthDate field to JSON user records ." It's a new function for the existing [2]userdb service , which adds a field to hold the user's date of birth:

Nanny state discovers Linux, demands it check kids' IDs before booting [3]READ MORE

Stores the user's birth date for age verification, as required by recent laws in California (AB-1043), Colorado (SB26-051), Brazil (Lei 15.211/2025), etc.

The contents of the field will be protected from modification except by users with root privileges.

The change comes after the [4]recent release of systemd 260 but unless it is reverted for some reason, it will be part of systemd 261. One of the justifications is to facilitate the new [5]parental controls in Flatpak , which are still in the draft stage.

The change comes after the various bits of new legislation to bring age checks into operating systems, which The Reg [6]covered recently . We also reported on how [7]System76 is pushing back against the legislation .

[8]

The ripples are still spreading across the Linux world.

[9]

[10]

GrapheneOS is a de-Googled version of Android for privacy-centric smartphones, which [11]may appear on Motorola phones next year . The Canadian nonprofit behind the OS [12]posted on X : "GrapheneOS will remain usable by anyone around the world without requiring personal information, identification or an account. GrapheneOS and our services will remain available internationally. If GrapheneOS devices can't be sold in a region due to their regulations, so be it."

Android doesn't use systemd, of course, but one of the other leading alternative phone OSes, postmarketOS, [13]switched to it in 2024 . We can't help but wonder if they regret the move yet.

[14]

Other distro communities may be starting to feel that way.

The Arch Linux ecosystem is quite broad, and some parts are not happy. One of the maintainers of the Arch-based Garuda Linux, which [15]we tried a few years ago and rather liked, has posted [16]a statement on age verification and the state of the community discourse in the distro's forums, saying:

Garuda Linux will not implement any age verification measures, since Garuda Linux's legal jurisdictions have no laws mandating age verification.

However, they continue:

Some of us [have] honestly been quite shocked at the way this conversation has been moving in the Linux community as a whole.

Distribution developers are being hounded at every corner for complying with these laws.

They note:

The targets of the Linux community should be politicians and local representatives as well as a boycott of Meta and other organizations involved with pushing these laws, as well as encouraging others to do the same.

Here, the Garuda folks are referring to the research from the [17]TBOTE Project . This organization's research surfaced in a [18]Reddit post and it is also mirroring its findings via Git, in its [19]own repository , and also [20]on GitHub .

[21]Age verification isn't sage verification when it's inside operating systems

[22]Nanny state discovers Linux, demands it check kids' IDs before booting

[23]Linux PC vendor System76 tries to talk Colorado down over OS age checks

[24]US state laws push age checks into the operating system

The TBOTE findings suggest that Meta is the biggest donor behind the lobbying for these age-verification laws and the [25]App Store Accountability Act (ACCA) . TBOTE claims it has directly traced more than $25 million, and that Meta could have spent upward of $2 billion on this over the last year. It also points to €10 million-plus spent lobbying in Europe.

Age verification isn't sage verification when it's inside operating systems [26]READ MORE

In the US, the main group pushing for these laws is the relatively young [27]Digital Childhood Alliance (DCA). As [28]right-wing think tank the "Institute for Family Studies" reported a year ago, this was assembled by [29]over 50 conservative groups . Six months later, in July 2025, [30]Bloomberg also reported that Meta was funding the DCA. For such a young and small organization, the DCA certainly seems to have had a rapid and almost disproportionate impact.

Meta's Facebook website is infamous for its [31]stance on privacy and has been for [32]many years . We are sure that Meta would never consider passing the buck on the important subject of protecting children online to OS vendors.

The direction of travel for systemd could be good news for systemd-free Arch variant [33]Artix Linux , and indeed for other systemd-free distros from [34]Adélie to [35]Alpine to [36]antiX . ®

Get our [37]Tech Resources



[1] https://github.com/systemd/systemd/pull/40954

[2] https://www.freedesktop.org/software/systemd/man/latest/systemd-userdbd.service.html

[3] https://www.theregister.com/2026/03/13/opinion_os_verification/

[4] https://www.theregister.com/2026/03/18/systemd_260/

[5] https://github.com/flatpak/xdg-desktop-portal/pull/1922

[6] https://www.theregister.com/2026/03/06/os_age_verification/

[7] https://www.theregister.com/2026/03/10/foss_age_verification_2/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2acMXlkvSRKat8LabDZjhRgAAAIQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44acMXlkvSRKat8LabDZjhRgAAAIQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33acMXlkvSRKat8LabDZjhRgAAAIQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[11] https://www.theregister.com/2026/03/02/motorola_grapheneos/

[12] https://nitter.net/GrapheneOS/status/2034957604682621229

[13] https://www.theregister.com/2024/03/11/postmarketos_goes_systemd/

[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44acMXlkvSRKat8LabDZjhRgAAAIQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[15] https://www.theregister.com/2022/07/28/garuda_linux_arch_better/

[16] https://forum.garudalinux.org/t/a-statement-on-age-verification-the-state-of-the-community-discourse/47652

[17] https://tboteproject.com/

[18] https://www.reddit.com/r/linux/comments/1rshc1f/i_traced_2_billion_in_nonprofit_grants_and_45/

[19] https://tboteproject.com/git/hekate/attestation-findings

[20] https://github.com/upper-up/meta-lobbying-and-other-findings

[21] https://www.theregister.com/2026/03/16/opinon_column_age_verification/

[22] https://www.theregister.com/2026/03/13/opinion_os_verification/

[23] https://www.theregister.com/2026/03/10/foss_age_verification_2/

[24] https://www.theregister.com/2026/03/06/os_age_verification/

[25] https://www.newamerica.org/insights/app-store-accountability-act-privacy-security-and-free-expression/

[26] https://www.theregister.com/2026/03/16/opinon_column_age_verification/

[27] https://www.digitalchildhoodalliance.org

[28] https://www.sourcewatch.org/index.php/Institute_for_Family_Studies

[29] https://ifstudies.org/in-the-news/over-50-conservative-groups-form-digital-childhood-alliance-to-push-for-child-safety-online

[30] https://www.bloomberg.com/news/articles/2025-07-25/meta-clashes-with-apple-google-over-child-age-check-legislation

[31] https://www.theregister.com/2021/08/04/facebook_research_lockdown/

[32] https://www.theregister.com/2018/04/21/facebook_privacy_audit_finds_everything_is_awesome/

[33] https://artixlinux.org/

[34] https://www.theregister.com/2024/12/20/adelie_linux_1_beta_6/

[35] https://www.theregister.com/2025/12/05/new_lts_kernel_and_alpine/

[36] https://www.theregister.com/2026/03/24/antix_26_bonsai_trixie/

[37] https://whitepapers.theregister.com/



systemd-free distros

GioCiampa

will not be immune if this kind of law becomes commonplace - they too will have to implement a similar mechanism.

Somehow I doubt that - as some have done - specifically stating "not for use in XYZ" will satisfy the "think of the children" crowd.

Re: systemd-free distros

Rich 2

Why will they have to? What’s going to happen if they don’t? And if they do there will be patches and forks that remove it again

And why the hell is age verification being added to flatpack? The world is going to shit (well yea Rich, duh!)

Re: systemd-free distros

Liam Proven

> And why the hell is age verification being added to flatpack?

I spell it out in the article. Because of the US ASAA:

https://www.congress.gov/bill/119th-congress/senate-bill/1586

Re: systemd-free distros

DS999

What would be the point of an open source OS checking age? Who is going to verify the age you enter into Fedora you downloaded for free and installed yourself is true?

Re: systemd-free distros

Dan 55

Your mom.

Re: systemd-free distros

Patch Wombat

The "think of the children" crowd need to watch their own sociopathic crib litter before worrying about me and my adult choices. Maybe the solution is for those parents to keep themselves and their children completely cut off from the Internet.

Re: systemd-free distros

Dan 55

But isn't this what we need - on device age indication (not verification) for child accounts instead of wholesale privacy invasion for everyone in the name of age verification?

California's law just allows an age to be entered by the way, so systemd managed to get it wrong, which is shocking and has certainly never happened before. But because it's systemd we're stuck with it now.

Facebork

Boris the Cockroach

would never pass on age checks to save their own arses.......... would they.......... would they................. would..... they ?

Plus it saves them the cost of actually verifying how old their addicts are.

(and given whats appearing on my farcebok feed, its becoming a sewer instead of a gutter with the amount of inflammatory AI slop thats being pumped out and then published by fakebook who are only too happy to take the money and run)

Re: Facebork

Rich 2

Well that’s the point isn’t it? Faecesbook spy yet another opportunity to take no responsibility for anything they do. And they’re bribing politicians to legalise their shitty lack of morals

Belongs in an IT sitcom

Anonymous Coward

Character 1: "Where can we put a DoB field which the community hates and doesn't fit any project's scope?"

Character 2: "systemd"

Yup....This root user was born on 1-Jan-1906!!!!

Anonymous Coward

Quote: "....Stores the user's birth date for age verification....."

So...at Linux install time, the person doing the install (root?) needs to supply a birth date.

- How would this be verified? Machine is off-line! Yup...I was born on 1-Jan-1906!!!!!!

Machine still offline. Create new users. More fake "birth dates".

Machine goes online. What now? Linux distributions provide automation to check root and user birth dates? SURELY NOT! How?

This is a complete day-dream!

Re: Yup....This root user was born on 1-Jan-1906!!!!

cd

Linux needs a random-dob-inserter

Re: Yup....This root user was born on 1-Jan-1906!!!!

Sudosu

How about August 6 1984. To tell them to "86" their 1984 attitude toward freedom.

Appropriate birthdate

Throatwarbler Mangrove

Everyone should just use 1/1/1984.

Re: Appropriate birthdate

Anonymous Coward

Surely 1/1/1970? As that is Zero and therefore False.

TrevorH

This appears to be an exercise in box checking. The post says "birthDate is excluded from user_record_self_modifiable_fields(), so only administrators can set or change it via homectl". So if you install your system and have root then you can change it post-install or during the install. The only children affected by this would be those whose parents do the install for them and do not give them root access (for as long it takes them to work out how to gain root and change it themselves).

It is *not* required

Richard 12

The California law is for a band.

This also directly breaks the GDPR, and so systemd cannot be used in Europe anymore.

Re: It is *not* required

Anonymous Coward

Hurray! Go for it, Potty!

Re: It is *not* required

Dan 55

Presumably if the computer is not located in a region* with a law which requires a birth date, the field will be optional or disabled?

* Region also to be filled in by admin, then.

Re: It is *not* required

tinpinion

Please provide the legal theory by which you assert that the GDPR is being directly violated. I don't know what 'this' is in your second sentence because the context is ambiguous.

Whatever legal theory you provide, someone will probably say that you're a moron who doesn't understand the GDPR. As a moron who doesn't understand the GDPR, I can attest that I am not the AC who will inevitably call you one in a humorous attempt to implicate me for having written this paragraph. If you don't have a legal theory to back up your assertion, it's fine to admit that you don't. I don't like the opinions of unqualified (in the sense that you have not qualified yourself to me, not that you possess no qualifications with which to do so) individuals being represented as absolute facts.

I think that we're probably on the same side of the debate. I'm confused and tired, I don't want to read the GDPR again, and if you've got a solid argument then I'd like to use it myself.

G'night!

Not changeable? Except by root?

martinusher

All this just confirms what I've long suspected -- the people making systemd haven't a clue what Linux is. Obviously, per Dunning-Kreuger, they'll consider themselves experts but if they stopped and looked at a real system then they'd understand that there are a lot of system "users" with only one or two actually being human. Its quite easy to add age as a user property but potentially rather pointless, especially if root can override it.

I'm prepared to add it just to shut people up. Its one of those things that you'll never win an argument about so just give 'em what they want. It will be an ongoing situation, though -- it will require constant patching as they realize it won't do what they think it should. We'll just have to roll with it until the focus, and accompanying battles, shift elsewhere. The urge to control "for your own good" is deeply embedded in some people, its what defines them, and handling them can waste a lot of energy.

BTW -- Speaking as a parent its actually far easier to teach the kids how to use stuff responsibly than to police their behavior around the clock. Kids are naturally curious so saying "you can't" is actually an open invitation for them to prove you wrong (and if they're a teenager then they're likely to succeed).

Re: Not changeable? Except by root?

Anonymous Coward

Is this a case of the systemd folk adding something to "just shut up people?" or is it their corporate influence showing?

this is what I don't get

Slant Four

So Linux stores the DOB in systemd, IOS elsewhere, Android elsewhere, WIndows elsewhere etc etc.

How does that DOB get to the end point internet based services, there is no standardized API like HTML within these laws.

So yeah, so every OS has it saved in a different location and now every application that needs it now needs to add in a IF THEN ELSE ELSE ELSE ELSE ... clause depending on the OS of the device. And what happens when it comes across Devuan...can you then no longer use that remote service to download stuff.

On top of this, someone needs to tag every app or using the exception rule, every app that is considered child inappropriate...who does this work...is their some government censor that does this?.

Sure some of the standard apps stores (apple/android) might be some of the way to this tagging but what of the LInux app stores. What of all the Linux apps that aren't in what is considered a "store" where you download the source and compile or off the beaten track OS'es like OpenIndiana?

Logic would say (not that politicians have logic) that kids run IOS or Android cause that's what runs on phones and that's where all the apps are. Maybe some kids run Windows on a tablet but sure as hell, kids are not running Linux on a phone (cause no apps) nor running Linux on a tablet or a PC (no apps).

So target the OS'es that 99.9% of the kids use and leave Linux, BSD etc alone.

Bluck

Re: this is what I don't get

Anonymous Coward

Yep, either target the app store, the app owners (looking at you, Facebook), or teach parents to assume some sort of parental responsibility!

I mean, let's take this to its logical conclusion:

All beaches closed off - gates available that allow those over a certain age access to the water.

The same for pavements and roads - it's bloody dangerous for a 2 year old to be walking down a pavement of a busy road on their own. Don't blame the parents! Fence off ALL roads, and close those that don't comply!

Obviously, ALL kettles, ovens, and hobs need this built in too - safety conscious parents adding childproof controls is just not good enough. EVERY kettle, oven and hob EVERYWHERE needs age verification!

Front seat car doors? Ditto.

The list goes on. And "if you don't agree, you must be a paedo."

Re: this is what I don't get

sured

HTML doesn't have a API. A common API isn't needed to implement dob_check (), or on Windows DobCheck().

Re: this is what I don't get

Dan 55

The app store would send an additional field with the age, filtering would be done by the app store program on the computer (e.g. Linux Mint Software Manager).

MS and Apple certainly aren't rewriting each binary in the OS so it checks the age or messing around with WinGet to comply with the law, so why should Linux distros?

This is purely performative.

glennsills@gmail.com

Linux is open source. Patches that make the system reply to an age query with "going on 99" will be trivial and popular.

We got here because workable policies that protect kids would cost sites like YouTube, Facebook, TikTok, Instagram, and all the porn sites way too much money. To protect kids from harmful contents these sites need to be liable for the damage and be forced to use strong identity for each user. Anything else is just politicians "doing something" about the problem.

Re: This is purely performative.

Anonymous Coward

> We got here because workable policies that protect kids would cost sites like YouTube, Facebook, TikTok, Instagram, and all the porn sites way too much money.

We got here because involved and attentive parenting would cost parents too much time they could have spent on sites like YouTube, Facebook, TikTok, Instagram, and all the porn sites.

Re: This is purely performative.

I could be a dog really

these sites need to be liable for the damage and be forced to use strong identity for each user

The problem with that is that it hurts others. Examples of people who need there to not be "strong identity" include :

* People under repressive regimes who hold views not acceptable to that regime - which is rapidly looking like it includes the USA !

* People who are trying to stay alive when certain medical options are forbidden by law - think women forbidden from getting an abortion even though not doing so risks them dying

* People trying to get away from abusive relationships

* Whistleblowers

* and a few others that don't come to mind right now

Also, anything workable means handing over personal information to people who have no need to know it. Would you, for example, be happy to use an age verification scheme run by ... perhaps Palantir, as long as they pinky swear they won't use your information for anything other than age verification ? And even if the service is run by honest people, thing how many data breaches there have been lately ?

And then there's scope for government scope creep - it's age verification for porn sites today, what does it cover tomorrow ?

Surprise

standard user experience

I'm still struggling to understand why people use their actual birth dates on (well really any) sites. I've always been a fan of 01/01/1970 :)

Well that didn't take long.

ecofeco

https://itsfoss.com/news/systemd-fork-strips-out-age-verification/

Someone Forked Systemd to Strip Out Its Age Verification Support

Anonymous Coward

"new parental controls in Flatpak, which are still in the draft stage"

I misread that, appropriately enough, as 'daft phase'.

ExampleOne

Can it handle BC dates?

And I am not sure which answer here is worse!

zimzam

People are really overstating this. All this does is add a data field into a list of dozens of other entirely optional data fields. If you have a systemd-based distro then you already had an operating system with a data field to store your name, email and location. Those fields are all empty and you can fill them with whatever you want.

If you really think these laws will go away because you puff out your cheeks and cross your arms then you don't know anything about the real world. They're just trying to comply with the law in the most minimal way permissible.

Jamesit

As I posted in another comment to the another article,

"If distros add a restriction on who may install, then they are no longer free software. To be free software requires no restriction on use and distribution."

I wonder if this would count as a restriction on installing?

Dan 55

Does this mean every account should have root privileges in Linux? Anything else would be a restriction.

zimzam

That's not what this is doing. Is anyone going to read the actual thing? It's just a data field. If you're unfortunate enough to live within one of these jurisdictions you enter any date into that field, if you're not you don't. Also, these attestation laws aren't about access to the operating system, they're about passing age attestation to applications that request it.

Way more importantly

Cubbie Roo

why the feck is flathub down lol

Increased sunspot activity.