wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-08-02 19:03:04 +02:00
Code Issues Projects Releases Wiki Activity

permissions and groups fixes

Browse source
This commit is contained in:
Jack Ivanov 2019-11-21 09:36:24 +01:00
parent d1c21d62b7
commit daa9bda685
2 changed files with 5 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
files/cloud-init/base.sh
View file

@ -4,18 +4,16 @@ set -eux
apt-get update -y apt-get update -y
apt-get install sudo -y apt-get install sudo -y
getent passwd algo || useradd -m -d /home/algo -s /bin/bash -G sudo -p '!' algo getent passwd algo || useradd -m -d /home/algo -s /bin/bash -G adm,netdev -p '!' algo
cat <<EOF >/etc/sudoers.d/10-algo-user (umask 337 && echo "algo ALL=(ALL) NOPASSWD:ALL" >/etc/sudoers.d/10-algo-user)
algo ALL=(ALL) NOPASSWD:ALL
EOF
cat <<EOF >/etc/ssh/sshd_config cat <<EOF >/etc/ssh/sshd_config
{{ lookup('template', 'files/cloud-init/sshd_config') }} {{ lookup('template', 'files/cloud-init/sshd_config') }}
EOF EOF
test -d /home/algo/.ssh || sudo -u algo mkdir -p /home/algo/.ssh/ test -d /home/algo/.ssh || (umask 077 && sudo -u algo mkdir -p /home/algo/.ssh/)
echo "{{ lookup('file', '{{ SSH_keys.public }}') }}" | sudo -u algo tee /home/algo/.ssh/authorized_keys echo "{{ lookup('file', '{{ SSH_keys.public }}') }}" | (umask 177 && sudo -u algo tee /home/algo/.ssh/authorized_keys)
sudo apt-get remove -y --purge sshguard || true sudo apt-get remove -y --purge sshguard || true
systemctl restart sshd.service systemctl restart sshd.service

2
files/cloud-init/base.yml
View file

@ -12,7 +12,7 @@ users:
- name: algo - name: algo
homedir: /home/algo homedir: /home/algo
sudo: ALL=(ALL) NOPASSWD:ALL sudo: ALL=(ALL) NOPASSWD:ALL
groups: sudo groups: adm,netdev
shell: /bin/bash shell: /bin/bash
lock_passwd: true lock_passwd: true
ssh_authorized_keys: ssh_authorized_keys: