46 lines
1.1 KiB
Bash
Executable file
46 lines
1.1 KiB
Bash
Executable file
#!/bin/bash
|
|
# Задание 3, Модуль 1 (HQ-SRV / BR-SRV)
|
|
read -p "Введите логин: " L
|
|
read -p "Введите пароль: " P
|
|
read -p "Введите id полльзоваелья: " I
|
|
read -p " Введите port: " Po
|
|
[ $EUID -ne 0 ] && echo "Требуется root" && exit 1
|
|
|
|
# 1. Пользователь remote_user
|
|
useradd -m remote_user 2>/dev/null
|
|
|
|
# 2. Пользователь sshuser
|
|
useradd -u $I -m $L 2>/dev/null
|
|
echo "$L:$P" | chpasswd
|
|
|
|
# 3. Sudo без пароля для sshuser
|
|
echo "$L ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers
|
|
chmod 440 /etc/sudoers
|
|
|
|
cat > /etc/ssh/sshd_config << EOF
|
|
Port $Po
|
|
AllowUsers $L
|
|
MaxAuthTries 2
|
|
EOF
|
|
|
|
cat > /etc/selinux/config << EOF
|
|
SELINUX=disabled
|
|
SELINUX=targeted
|
|
EOF
|
|
|
|
touch /etc/ssh/ban
|
|
echo "________________________________________" > /etc/ssh/ban
|
|
echo "" >> /etc/ssh/ban
|
|
echo "Authorized access only" >> /etc/ssh/ban
|
|
echo ""
|
|
echo "________________________________________" >> /etc/ssh/ban
|
|
echo "Banner /etc/ssh/ban" >> /etc/ssh/sshd_config
|
|
systemctl restart sshd
|
|
|
|
echo "Готово"
|
|
echo ""
|
|
echo "Имя: $L"
|
|
echo "Пароль: $P"
|
|
echo "ID: $I "
|
|
echo "Port $Po"
|