This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| #Server hardening script for cPanel servers | |
| # Make sure only root can run this script | |
| if [ "$(id -u)" != "0" ]; then | |
| echo -e "\e[93m This script must be run as root \e[0m" | |
| exit 1 | |
| fi | |
| echo -e "\e[1;36;40m Server Hardening initiated \e[0m" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # This script assumes you've created this server with a key pair. If you haven't, you're not getting back in. | |
| # Switch to everett user | |
| adduser --shell /bin/bash --gecos "User for managing feeds" --disabled-password --home /home/everett everett | |
| adduser everett sudo | |
| grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers || echo "#includedir /etc/sudoers.d" >> /etc/sudoers | |
| ( umask 226 && echo "everett ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/50_everett_sh ) | |
| mkdir /home/everett/.ssh |
NewerOlder