konsthol/SecDep
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

We've known each other for so long

Browse Source
This commit is contained in:
konsthol
2023-08-31 21:39:37 +03:00
parent 42cf19a587
commit 35aba11739
1 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
harden
View File

@@ -425,6 +425,7 @@ EOF
# } # }
# Fix banaction ufw with iptables # Fix banaction ufw with iptables
# Does not persist after reboot
function configureFail2ban { function configureFail2ban {
FAIL2BAN_LOCAL=$(cat <<'EOF' FAIL2BAN_LOCAL=$(cat <<'EOF'
[Definition] [Definition]
@@ -523,14 +524,17 @@ function enableServices {
function deleteRemainingUsers { function deleteRemainingUsers {
# Delete possible remaining users # Delete possible remaining users
sudo systemctl enable --now atd cat << EOF | sudo tee /root/delete_users.sh
at now + 1 minute << 'EOF' [[ -d /home/admin ]] && sudo userdel -r admin && sudo groupdel admin
[[ -d /home/admin ]] && sudo userdel -r admin && sudo groupdel admin [[ -d /home/ec2-user ]] && sudo userdel -r ec2-user && sudo groupdel ec2-user
[[ -d /home/ec2-user ]] && sudo userdel -r ec2-user && sudo groupdel ec2-user [[ -d /home/centos ]] && sudo userdel -r centos && sudo groupdel centos
[[ -d /home/centos ]] && sudo userdel -r centos && sudo groupdel centos [[ -d /home/fedora ]] && sudo userdel -r fedora && sudo groupdel fedora
[[ -d /home/fedora ]] && sudo userdel -r fedora && sudo groupdel fedora [[ -d /home/ubuntu ]] && sudo userdel -r ubuntu && sudo groupdel ubuntu
[[ -d /home/ubuntu ]] && sudo userdel -r ubuntu && sudo groupdel ubuntu sudo rm -f /root/delete_users.sh
EOF EOF
sudo systemctl enable --now atd
# Use at as root because if it is run as one of the users above it will fail
sudo at now + 1 minute <<< "bash /root/delete_users.sh"
} }
# The main function will call the check_dependencies function and exit if it fails. # The main function will call the check_dependencies function and exit if it fails.