External/du_setup
1
0
Fork 0
mirror of https://github.com/buildplan/du_setup.git synced 2025-12-29 16:14:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix user clean-up

Browse Source
This commit is contained in:
buildplan
2025-10-14 02:25:16 +01:00
parent 143cc3eb25
commit eece3add80
1 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
du_setup.sh
View File

@@ -861,25 +861,28 @@ cleanup_provider_packages() {
print_section "Provider User Cleanup" print_section "Provider User Cleanup"
print_warning "Default users created during provisioning can be security risks." print_warning "Default users created during provisioning can be security risks."
echo echo
for user in "${PROVIDER_USERS[@]}"; do for user in "${PROVIDER_USERS[@]}"; do
echo -e "${YELLOW}Found user: $user${NC}" echo -e "${YELLOW}Found user: $user${NC}"
local proc_count local proc_count=1
proc_count=$(ps -u "$user" 2>/dev/null | wc -l) if ps -u "$user" >/dev/null 2>&1; then
proc_count=$(ps -u "$user" 2>/dev/null | wc -l || echo 1)
fi
if [[ $proc_count -gt 1 ]]; then if [[ $proc_count -gt 1 ]]; then
print_warning "User $user has $((proc_count - 1)) running process(es)." print_warning "User $user has $((proc_count - 1)) running process(es)."
fi fi
if [[ -f "/home/$user/.ssh/authorized_keys" ]]; then if [[ -d "/home/$user" ]] && [[ -f "/home/$user/.ssh/authorized_keys" ]]; then
local key_count local key_count=0
key_count=$(grep -cE '^ssh-(rsa|ed25519|ecdsa)' "/home/$user/.ssh/authorized_keys" 2>/dev/null || echo 0) key_count=$(grep -cE '^ssh-(rsa|ed25519|ecdsa)' "/home/$user/.ssh/authorized_keys" 2>/dev/null || echo 0)
if [[ $key_count -gt 0 ]]; then if [[ $key_count -gt 0 ]]; then
print_warning "User $user has $key_count SSH key(s) configured." print_warning "User $user has $key_count SSH key(s) configured."
fi fi
fi fi
if execute_check groups "$user" 2>/dev/null | grep -qE '\bsudo\b|\badmin\b'; then if id -nG "$user" 2>/dev/null | grep -qwE '(sudo|admin)'; then
print_warning "User $user has sudo/admin privileges!" print_warning "User $user has sudo/admin privileges!"
fi fi