Added security and functionality.
- Introduced a sudo-nopasswd script that allows users to edit and update in one shot. - Use random suffix on temp files to avoid collisions and hacks.
This commit is contained in:
@@ -1,9 +1,12 @@
|
||||
#!/bin/bash
|
||||
if [ ! "$INSTANCE" ]; then
|
||||
INSTANCE="$(head -c10 /dev/urandom | base32)"
|
||||
fi
|
||||
ETC_FILE="/etc/sudo-nopasswd"
|
||||
SUDOERS_FILE="/etc/sudoers"
|
||||
SUDOERS_BAK="/etc/sudoers.bak"
|
||||
BEFORE_COMMANDS="/tmp/sudo-nopasswd-before"
|
||||
AFTER_COMMANDS="/tmp/sudo-nopasswd-after"
|
||||
SUDOERS_BAK="/etc/sudoers.bak_$INSTANCE"
|
||||
BEFORE_COMMANDS="/tmp/sudo-nopasswd-before-$INSTANCE"
|
||||
AFTER_COMMANDS="/tmp/sudo-nopasswd-after-$INSTANCE"
|
||||
SCRIPT_NAME="update-sudo-nopasswd"
|
||||
|
||||
# Installation paths
|
||||
@@ -15,5 +18,3 @@ INITD_DIR="/etc/init.d"
|
||||
|
||||
UPDATE_COMMAND="update-sudo-nopasswd"
|
||||
WATCH_COMMAND="watch-sudo-nopasswd"
|
||||
|
||||
SHARE_DIR="/usr/share/sudo-nopasswd"
|
||||
Reference in New Issue
Block a user