Systemd Introduces Birth Date Support for Upcoming Linux Desktop Age Controls

A recent systemd update introduces birth date storage, supporting ongoing efforts to implement age-based access controls in the Linux desktop stack.

Whether you like it or not, the recently much-discussed age-verification requirements are beginning to influence how the Linux desktop is built. In light of this, systemd now includes a birthDate field in its user record format, representing an initial step toward standardizing age-related metadata in the Linux desktop stack.

This update, merged via pull request, extends systemd’s userdb JSON structure to include a user’s full date of birth. The field serves as a system-level source of truth, enabling other components to access age-related information as needed. Users cannot edit this field directly. It must be set by an administrator, typically using the homectl tool.

It is important to understand that this addition does not itself enforce age restrictions or verification. Instead, it provides foundational data for other services. In parallel, xdg-desktop-portal developers are introducing APIs that allow sandboxed applications to determine content accessibility based on user age.

This approach follows the established portal model in Flatpak-based environments. Applications do not access sensitive user data directly. Instead, they request information through a controlled interface. Here, the portal is expected to return only limited results, such as an age bracket or an allow-or-deny decision, rather than the actual birth date.

With that said, systemd acts solely as a backend provider in this architecture. By storing a consistent birth date at the system level, it allows higher-level components, such as portals or account services, to make age-related decisions without requiring each application to implement its own logic or storage.

This development is linked to a broader regulatory context. The systemd pull request references new legal requirements, including California AB-1043, Colorado SB26-051, and Brazil’s Lei 15.211/2025. These laws expand obligations for age verification, parental controls, and access restrictions for minors online.

Expectably, this sparked discussion among developers. Some believe storing a full date of birth introduces unnecessary sensitive data and suggest that age ranges may suffice for most cases. Others argue that retaining the original data at the system level offers flexibility, with stricter controls applied by higher layers such as portals.

Technically, the distinction between storage and exposure is key. Systemd stores the complete birth date, but applications interact only with mediated results from portal APIs, where portals serve as gatekeepers between sandboxed applications and system resources.

But what about systemd-free distributions, like Void, Alpine, Devuan, etc.? Without systemd’s userdb and the birthDate field, they will likely need to either provide an alternative data source, such as by extending AccountsService, or return limited responses through portal APIs, which will certainly require additional development work on their part.

Finally, to reiterate: adding a birthDate field does not immediately affect the user experience on Linux systems. In any case, however, it clearly signals an effort across projects to support age-aware behavior in desktop applications. And by all accounts, it seems that a move in this direction is becoming increasingly inevitable.

Bobby Borisov

Bobby Borisov

Bobby, an editor-in-chief at Linuxiac, is a Linux professional with over 20 years of experience. With a strong focus on Linux and open-source software, he has worked as a Senior Linux System Administrator, Software Developer, and DevOps Engineer for small and large multinational companies.

3 Comments

  1. Francesco

    The end has come, the mass control has begun. All software will use this API, and in the near future, we won’t be able to deny access to any software without verification. After the birth age, the ID will be implemented.
    The filing begins, children have nothing to do with it 😉

  2. kuiperzone

    Truly, if this was about keeping kids away from social media, I would be for it. Hell, I’d go further. Get mobile phones and laptops out of schools. I’d go even further. The mobile networks should be shutdown. The harm done by smartphones is too great to comprehend.

    Not going to happen of course. Too much money involved. The responsibility will be pushed down the chain.

    I cannot see these developments as anything other than the thin of the wedge. Once in place, why stop at just “age”? You can be locked out of your own computer for all manor of characteristics and ideology.

    1. Miles

      Agreed. A lot of people rightly attack these laws for the reasons you’ve mentioned, but always fallback on the glorified platitude of “it’s the parent’s responsibility” when it comes to the actual issue if the harm done to children by these devices.

      This harm which goes way beyond access to 18+ content. A lot of children’s entertainment is literally (not figuratively, extensive research really goes into this) engineered to be as addictive and this harmful as possible.

      “It’s the parents responsibility” – but parents aren’t doing their responsibility. They’re giving internet enabled tablets to toddlers and then drugging them when (suprised pikachu face) they have behavioural problems and can’t concentrate at school. You can barely go out for in public today without being subjected to the sounds from some tablet shoved in the hands of a child. This is abuse and neglect and something needs to be done about it, actually. Not this though, this is at best a waste of time, and at worst the thin of the wedge as you mentioned.

Leave a Reply

Your email address will not be published. Required fields are marked *