Subversion Repositories ALCASAR

Rev

Rev 3200 | Rev 3206 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 3200 Rev 3201
Line 1... Line 1...
1
#!/bin/bash
1
#!/bin/bash
2
#  $Id: alcasar.sh 3200 2024-05-05 22:45:25Z rexy $
2
#  $Id: alcasar.sh 3201 2024-05-28 17:21:34Z rexy $
3
 
3
 
4
# ALCASAR is a Free and open source NAC (Network Access Controler) created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
4
# ALCASAR is a Free and open source NAC (Network Access Controler) created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
5
# ALCASAR is based on a stripped Mageia (LSB) with the following open source softwares Coovachilli, freeradius, mariaDB, lighttpd, php, netfilter, e2guardian, ntpd, openssl, unbound, gammu, Ulog, fail2ban, vnstat, wkhtml2pdf, ipt_NETFLOW, NFsen and NFdump
5
# ALCASAR is based on a stripped Mageia (LSB) with the following open source softwares Coovachilli, freeradius, mariaDB, lighttpd, php, netfilter, e2guardian, ntpd, openssl, unbound, gammu, Ulog, fail2ban, vnstat, wkhtml2pdf, ipt_NETFLOW, NFsen and NFdump
6
# contact : info@alcasar.net
6
# contact : info@alcasar.net
7
 
7
 
Line 448... Line 448...
448
	pbkdf2=`( echo $grub2pwd ; echo $grub2pwd ) | \
448
	pbkdf2=`( echo $grub2pwd ; echo $grub2pwd ) | \
449
		LC_ALL=C /usr/bin/grub2-mkpasswd-pbkdf2 | \
449
		LC_ALL=C /usr/bin/grub2-mkpasswd-pbkdf2 | \
450
		grep -v '[eE]nter password:' | \
450
		grep -v '[eE]nter password:' | \
451
		sed -e "s/PBKDF2 hash of your password is //"`
451
		sed -e "s/PBKDF2 hash of your password is //"`
452
	echo "GRUB2_PASSWORD=$pbkdf2" > /boot/grub2/user.cfg
452
	echo "GRUB2_PASSWORD=$pbkdf2" > /boot/grub2/user.cfg
453
	[ -e /root/grub.default ] || cp /etc/grub.d/10_linux /root/grub.default
-
 
454
	cp -f $DIR_CONF/grub-10_linux /etc/grub.d/10_linux  # Request password only on menu editing attempts (not when selecting an entry)
-
 
455
	chmod 0600 /boot/grub2/user.cfg
453
	chmod 0600 /boot/grub2/user.cfg
456
	echo "# Login name and password to protect GRUB2 boot menu (!!!qwerty keyboard) : " > $PASSWD_FILE
454
	echo "# Login name and password to protect GRUB2 boot menu (!!!qwerty keyboard) : " > $PASSWD_FILE
457
	echo "GRUB2_user=root" >> $PASSWD_FILE
455
	echo "GRUB2_user=root" >> $PASSWD_FILE
458
	echo "GRUB2_password=$grub2pwd" >> $PASSWD_FILE
456
	echo "GRUB2_password=$grub2pwd" >> $PASSWD_FILE
459
	mysqlpwd=`cat /dev/urandom | tr -dc '[:alnum:]' | head -c16`
457
	mysqlpwd=`cat /dev/urandom | tr -dc '[:alnum:]' | head -c16`