wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-08-02 19:03:04 +02:00
Code Issues Projects Releases Wiki Activity

permissions and groups fixes

Browse source
This commit is contained in:
Jack Ivanov 2019-11-21 09:36:24 +01:00
parent d1c21d62b7
commit daa9bda685
2 changed files with 5 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
files/cloud-init/base.sh
View file

@ -4,18 +4,16 @@ set -eux
apt-get update -y
apt-get install sudo -y
getent passwd algo || useradd -m -d /home/algo -s /bin/bash -G sudo -p '!' algo
getent passwd algo || useradd -m -d /home/algo -s /bin/bash -G adm,netdev -p '!' algo
cat <<EOF >/etc/sudoers.d/10-algo-user
algo ALL=(ALL) NOPASSWD:ALL
EOF
(umask 337 && echo "algo ALL=(ALL) NOPASSWD:ALL" >/etc/sudoers.d/10-algo-user)
cat <<EOF >/etc/ssh/sshd_config
{{ lookup('template', 'files/cloud-init/sshd_config') }}
EOF
test -d /home/algo/.ssh || sudo -u algo mkdir -p /home/algo/.ssh/
echo "{{ lookup('file', '{{ SSH_keys.public }}') }}" | sudo -u algo tee /home/algo/.ssh/authorized_keys
test -d /home/algo/.ssh || (umask 077 && sudo -u algo mkdir -p /home/algo/.ssh/)
echo "{{ lookup('file', '{{ SSH_keys.public }}') }}" | (umask 177 && sudo -u algo tee /home/algo/.ssh/authorized_keys)
sudo apt-get remove -y --purge sshguard || true
systemctl restart sshd.service

2
files/cloud-init/base.yml
View file

@ -12,7 +12,7 @@ users:
- name: algo
homedir: /home/algo
sudo: ALL=(ALL) NOPASSWD:ALL
groups: sudo
groups: adm,netdev
shell: /bin/bash
lock_passwd: true
ssh_authorized_keys: