xfce desktop environment: extracted out auto login as root into vulnerability module

This commit is contained in:
thomashaw
2017-03-24 15:30:30 +00:00
parent 9ce9941843
commit 03aaae2bc3
6 changed files with 45 additions and 7 deletions

View File

@@ -1,11 +1,5 @@
class xfce::install{
package { ['xfce4','lightdm']:
ensure => 'installed',
}
exec { 'lightdm-autologin-root':
require => Package['lightdm'],
command => "/bin/sed -i \'/\\[SeatDefaults\\]/a autologin-user=root\' /etc/lightdm/lightdm.conf"
}
}

View File

@@ -0,0 +1,5 @@
class xfce_lightdm_root_login::configure {
exec { 'lightdm-autologin-root':
command => "/bin/sed -i \'/\\[SeatDefaults\\]/a autologin-user=root\' /etc/lightdm/lightdm.conf"
}
}

View File

@@ -0,0 +1,22 @@
<?xml version="1.0"?>
<vulnerability xmlns="http://www.github/cliffe/SecGen/vulnerability"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.github/cliffe/SecGen/vulnerability">
<name>XFCE w/ LightDM Root Login</name>
<author>Thomas Shaw</author>
<module_license>MIT</module_license>
<description>Configures XFCE w/ LightDM to automatically login as root without a password.</description>
<type>desktop_environment</type>
<privilege>root_rwx</privilege>
<access>local</access>
<platform>linux</platform>
<requires>
<type>update</type>
</requires>
<requires>
<module_path>modules/utilities/unix/desktop/xfce</module_path>
</requires>
</vulnerability>

View File

@@ -0,0 +1 @@
include xfce_lightdm_root_login::configure

View File

@@ -0,0 +1,16 @@
<?xml version="1.0"?>
<scenario xmlns="http://www.github/cliffe/SecGen/scenario"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">
<system>
<system_name>xfce_lightdm_root_login</system_name>
<base platform="linux"/>
<vulnerability module_path=".*xfce_lightdm_root_login"/>
<network type="private_network" range="dhcp"/>
</system>
</scenario>

View File

@@ -264,7 +264,7 @@
<system>
<system_name>desktop</system_name>
<base platform="linux"/>
<utility module_path=".*xfce"/>
<vulnerability module_path=".*xfce_lightdm_root_login"/>
<utility module_path=".*iceweasel" />
<network module_path=".*private_network_2"/>
</system>