diff --git a/Dockerfile b/Dockerfile index 0542d01..96bb37e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,7 +4,7 @@ FROM alpine:3.20.0 AS monosphere-builder #Setting default settings, please change them at run -ARG MONOSPHERE_VERSION="2.0.6 Alpha" +ARG MONOSPHERE_VERSION="2.1.6 Alpha" #Defining build settings diff --git a/admin_menu.sh b/admin_menu.sh index 438d7e7..0340259 100644 --- a/admin_menu.sh +++ b/admin_menu.sh @@ -70,6 +70,7 @@ function servers_access_control() { "2") echo -e "Veuillez bien vérifier la syntaxe de votre configuration avant de valider cette dernière.\nPour plus d'informations, consultez la documentation de Monosphere." + sleep 5s sudo nano /opt/public/servers/authorized_servers.txt ;; @@ -87,6 +88,12 @@ function servers_access_control() { done } +function admin_rights_control() { + echo -e "Veuillez bien vérifier la syntaxe de votre configuration avant de valider cette dernière.\nPour plus d'informations, consultez la documentation de Monosphere." + sleep 5s + sudo nano /opt/public/rights/admin_rights.txt +} + function main_menu() { ADMIN_RIGHTS_PATH="opt/public/rights" ADMIN_RIGHTS_FILE="/${ADMIN_RIGHTS_PATH}/admin_rights.txt" @@ -148,9 +155,10 @@ function main_menu() { # # ;; # - # "adminscontrol_admins") - # - # ;; + "adminscontrol_admins") + admin_rights_control + ;; + # # "cluster_admins") # diff --git a/admin_rights.txt b/admin_rights.txt index 693afd1..ea99fbc 100644 --- a/admin_rights.txt +++ b/admin_rights.txt @@ -1,2 +1,3 @@ sessionswatch_admins Visionnage_des_sessions_du_bastion bastion serverscontrol_admins Administration_des_acces_serveurs bastion +adminscontrol_admins Administration_des_privileges bastion diff --git a/entrypoint.sh b/entrypoint.sh index a01ab85..301336d 100644 --- a/entrypoint.sh +++ b/entrypoint.sh @@ -66,6 +66,7 @@ for userinfo in ${userfile}; do echo "${user} ALL=(ALL) NOPASSWD: /usr/local/bin/ttyplay*" | sudo EDITOR='tee -a' visudo echo "${user} ALL=(ALL) NOPASSWD: /bin/ls*" | sudo EDITOR='tee -a' visudo echo "${user} ALL=(ALL) NOPASSWD: /usr/bin/nano /opt/public/servers/authorized_servers.txt" | sudo EDITOR='tee -a' visudo + echo "${user} ALL=(ALL) NOPASSWD: /usr/bin/nano /opt/public/rights/admin_rights.txt" | sudo EDITOR='tee -a' visudo fi mkdir /home/"${user}" ln -s /opt/public/scripts/server_menu.sh /home/"${user}"/server_menu.sh