Siphonight/monosphere-bastion
0
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 5 Wiki Activity

Ajout du menu modification privilèges

Browse Source
This commit is contained in:
Siphonight 2025-01-21 01:19:08 +01:00
parent 7c1eaa03b1
commit 6ec027d03b
4 changed files with 14 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Dockerfile
View File

@ -4,7 +4,7 @@ FROM alpine:3.20.0 AS monosphere-builder
#Setting default settings, please change them at run #Setting default settings, please change them at run
ARG MONOSPHERE_VERSION="2.0.6 Alpha" ARG MONOSPHERE_VERSION="2.1.6 Alpha"
#Defining build settings #Defining build settings

14
admin_menu.sh
View File

@ -70,6 +70,7 @@ function servers_access_control() {
"2") "2")
echo -e "Veuillez bien vérifier la syntaxe de votre configuration avant de valider cette dernière.\nPour plus d'informations, consultez la documentation de Monosphere." echo -e "Veuillez bien vérifier la syntaxe de votre configuration avant de valider cette dernière.\nPour plus d'informations, consultez la documentation de Monosphere."
sleep 5s
sudo nano /opt/public/servers/authorized_servers.txt sudo nano /opt/public/servers/authorized_servers.txt
;; ;;
@ -87,6 +88,12 @@ function servers_access_control() {
done done
} }
function admin_rights_control() {
echo -e "Veuillez bien vérifier la syntaxe de votre configuration avant de valider cette dernière.\nPour plus d'informations, consultez la documentation de Monosphere."
sleep 5s
sudo nano /opt/public/rights/admin_rights.txt
}
function main_menu() { function main_menu() {
ADMIN_RIGHTS_PATH="opt/public/rights" ADMIN_RIGHTS_PATH="opt/public/rights"
ADMIN_RIGHTS_FILE="/${ADMIN_RIGHTS_PATH}/admin_rights.txt" ADMIN_RIGHTS_FILE="/${ADMIN_RIGHTS_PATH}/admin_rights.txt"
@ -148,9 +155,10 @@ function main_menu() {
# #
# ;; # ;;
# #
# "adminscontrol_admins") "adminscontrol_admins")
# admin_rights_control
# ;; ;;
# #
# "cluster_admins") # "cluster_admins")
# #

1
admin_rights.txt
View File

@ -1,2 +1,3 @@
sessionswatch_admins Visionnage_des_sessions_du_bastion bastion sessionswatch_admins Visionnage_des_sessions_du_bastion bastion
serverscontrol_admins Administration_des_acces_serveurs bastion serverscontrol_admins Administration_des_acces_serveurs bastion
adminscontrol_admins Administration_des_privileges bastion

1
entrypoint.sh
View File

@ -66,6 +66,7 @@ for userinfo in ${userfile}; do
echo "${user} ALL=(ALL) NOPASSWD: /usr/local/bin/ttyplay*" | sudo EDITOR='tee -a' visudo echo "${user} ALL=(ALL) NOPASSWD: /usr/local/bin/ttyplay*" | sudo EDITOR='tee -a' visudo
echo "${user} ALL=(ALL) NOPASSWD: /bin/ls*" | sudo EDITOR='tee -a' visudo echo "${user} ALL=(ALL) NOPASSWD: /bin/ls*" | sudo EDITOR='tee -a' visudo
echo "${user} ALL=(ALL) NOPASSWD: /usr/bin/nano /opt/public/servers/authorized_servers.txt" | sudo EDITOR='tee -a' visudo echo "${user} ALL=(ALL) NOPASSWD: /usr/bin/nano /opt/public/servers/authorized_servers.txt" | sudo EDITOR='tee -a' visudo
echo "${user} ALL=(ALL) NOPASSWD: /usr/bin/nano /opt/public/rights/admin_rights.txt" | sudo EDITOR='tee -a' visudo
fi fi
mkdir /home/"${user}" mkdir /home/"${user}"
ln -s /opt/public/scripts/server_menu.sh /home/"${user}"/server_menu.sh ln -s /opt/public/scripts/server_menu.sh /home/"${user}"/server_menu.sh