mirror of
https://github.com/m8tin/cis.git
synced 2025-12-06 15:58:26 +01:00
43 lines
1.5 KiB
Bash
Executable File
43 lines
1.5 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
#WARNING: Used for core functionality in setup.sh
|
|
# DO NOT rename the script and test changes well!
|
|
|
|
|
|
|
|
# Note that an unprivileged user can use this script successfully,
|
|
# if no user has to be added to the host because it already exists.
|
|
function addNormalUser() {
|
|
local _USER
|
|
_USER="${1:?"Missing first parameter USER"}"
|
|
readonly _USER
|
|
|
|
#The user already exists
|
|
id -u "${_USER}" &> /dev/null \
|
|
&& echo "SUCCESS: The user already exists: ("$(readlink -f ${0})")" \
|
|
&& echo " - '${_USER}'" \
|
|
&& return 0
|
|
|
|
# useradd is a low level utility ... use adduser(8) instead.
|
|
# See: https://askubuntu.com/questions/345974/what-is-the-difference-between-adduser-and-useradd
|
|
[ "$(id -u)" == "0" ] \
|
|
&& adduser --gecos 'Normal user' --disabled-password "${_USER}" \
|
|
&& chown -R "${_USER}:${_USER}" "/home/${_USER}" \
|
|
&& echo "SUCCESS: The user was created: ("$(readlink -f ${0})")" \
|
|
&& echo " - '${_USER}'" \
|
|
&& echo " - no password was set, use passwd if needed" \
|
|
&& echo " - existing home directories were taken over" \
|
|
&& return 0
|
|
|
|
echo "FAIL: The user could not be created: ("$(readlink -f ${0})")" >&2
|
|
echo " - '${_USER}'" >&2
|
|
echo " - due to an error or insufficient rights." >&2
|
|
return 1
|
|
}
|
|
|
|
# sanitizes all parameters
|
|
addNormalUser "$(echo ${1} | sed -E 's|[^a-zA-Z0-9/:@._-]*||g')" \
|
|
&& exit 0
|
|
|
|
exit 1
|