summaryrefslogtreecommitdiffstats
path: root/lib/sunhpc/commands/create/security/users
diff options
context:
space:
mode:
authorxiubuzhe <xiubuzhe@sina.com>2023-10-08 20:59:00 +0800
committerxiubuzhe <xiubuzhe@sina.com>2023-10-08 20:59:00 +0800
commit1dac2263372df2b85db5d029a45721fa158a5c9d (patch)
tree0365f9c57df04178a726d7584ca6a6b955a7ce6a /lib/sunhpc/commands/create/security/users
parentb494be364bb39e1de128ada7dc576a729d99907e (diff)
downloadsunhpc-1dac2263372df2b85db5d029a45721fa158a5c9d.tar.gz
sunhpc-1dac2263372df2b85db5d029a45721fa158a5c9d.tar.bz2
sunhpc-1dac2263372df2b85db5d029a45721fa158a5c9d.zip
first add files
Diffstat (limited to 'lib/sunhpc/commands/create/security/users')
-rw-r--r--lib/sunhpc/commands/create/security/users/__init__.py42
1 files changed, 42 insertions, 0 deletions
diff --git a/lib/sunhpc/commands/create/security/users/__init__.py b/lib/sunhpc/commands/create/security/users/__init__.py
new file mode 100644
index 0000000..e5cddfa
--- /dev/null
+++ b/lib/sunhpc/commands/create/security/users/__init__.py
@@ -0,0 +1,42 @@
+#coding:utf-8
+
+import os
+import sys
+import stat
+import time
+import base64
+import sunhpc
+from sunhpc.core.utils import SafeError
+class Command(sunhpc.commands.create.security.command):
+ """
+ Update all user-related files (e.g., /etc/passwd, /etc/shadow, etc.)
+ on all known hosts. Also, restart autofs on all known hosts.
+
+ <arg type='string' name='safedir'>
+ Provide a path to encrypt, default: /etc/safe.d
+ </arg>
+
+ <params type='string' name='safedir'>
+ Provide a encrypt file output path, default: /etc/safe.d
+ </params>
+
+ <example cmd='create security users'>
+ Encrypt sunhpc os all base data.
+ </example>
+ """
+ def run(self, parms, args):
+ (self.safedir, salt, quiet) = self.fillParams([
+ ('safedir', '/etc/safe.d'),
+ ('salt', None),
+ ('quiet', 'yes')])
+
+ quiet = self.str2bool(quiet)
+ if not os.path.exists(self.safedir):
+ os.makedirs(self.safedir)
+
+ userdirs = ['/etc/passwd', '/etc/shadow', '/etc/group']
+ services = ['/etc/auto.master', '/etc/auto.home', '/etc/auto.share']
+ for i in userdirs + services:
+ self.makeEncrypt(i, quiet=quiet)
+
+RollName = "base"