commit 896f37b5ed9e161d89d0f6b72a31cb0f67080bf7
author Filip Pytloun <filip@pytloun.cz> Thu Jun 25 18:35:42 2015 +0200
committer Filip Pytloun <filip@pytloun.cz> Mon Jul 13 23:31:40 2015 +0200
tree 5e3790609921cb5ee5868a5a1afd1bd2d98d7dfa
parent 5bfc1df30ed7d58263ad455bc5961e1dd39f1347

No ubuntu user, disallow root login, root shell on tty1

Conflicts:
	ubuntu-14.04/scripts/base.sh
	ubuntu-14.04/template.json

ubuntu-14.04/scripts/security.sh

diff --git a/ubuntu-14.04/scripts/security.sh b/ubuntu-14.04/scripts/security.sh
new file mode 100644
index 0000000..7dd89b6
--- /dev/null
+++ b/ubuntu-14.04/scripts/security.sh
@@ -0,0 +1,9 @@
+# Auto login root on tty1
+sed -i 's|/sbin/getty|/sbin/getty --autologin root|g' /etc/init/tty1.conf
+
+# Disable password root login
+usermod -p '!' root
+
+# Disable SSH password authentication and permit root login
+sed -i 's|[#]*PasswordAuthentication yes|PasswordAuthentication no|g' /etc/ssh/sshd_config
+sed -i 's|[#]*PermitRootLogin no|PermitRootLogin yes|g' /etc/ssh/sshd_config