2021-11-02 14:59:56
This commit is contained in:
@@ -541,12 +541,12 @@ d-i preseed/late_command \
|
||||
in-target sed -i'.orig' -r 's/^#?(Port) .*/\1 4242/; s/^#?(PermitRootLogin) .*/\1 no/;' /etc/ssh/sshd_config; \
|
||||
in-target ufw enable; \
|
||||
in-target ufw allow proto tcp from any to any port 4242 comment 'Allow SSH'; \
|
||||
in-target getent group sudo >/dev/null 2>&1 || groupadd -f -r sudo; \
|
||||
in-target getent group user42 >/dev/null 2>&1 || groupadd -f user42; \
|
||||
in-target groupadd -f -r sudo; \
|
||||
in-target groupadd -f user42; \
|
||||
in-target usermod -a -G sudo,user42 gbaconni; \
|
||||
in-target sed -i'.orig' -r 's/^#?(PASS_MAX_DAYS).*/\1\t30/; s/^#?(PASS_MIN_DAYS).*/\1\t2/; s/^#?(PASS_WARN_AGE).*/\1\t7/; s/^#?(PASS_MIN_LEN).*/\1\t10/;' /etc/login.defs; \
|
||||
in-target sed -i'.orig' -r 's/^[# ]?(minlen =)/\1 10/; s/^[# ]?([ud]credit =)/\1 -1/; s/^[# ]?(maxrepeat =)/\1 3/; s/^[# ]?(usercheck =)/\1 1/; s/^[# ]?(difok =)/\1 7/;' /etc/security/pwquality.conf; \
|
||||
in-target test -d /var/log/sudo || mkdir -p /var/log/sudo; \
|
||||
in-target mkdir -p /var/log/sudo; \
|
||||
in-target echo -e 'passwd_tries=3\nbadpass_message="I am sorry. I am afraid you cannot do that."\nlog_input\nlog_output\niolog_dir="/var/log/sudo"\nrequiretty\nsecure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"' | sed 's/^/Defaults\t/' > /etc/sudoers.d/sudo; \
|
||||
in-target apt-get clean
|
||||
|
||||
|
||||
Reference in New Issue
Block a user