CCR BeagleBone Tools  v0.0.1-2206
Production Tools for BeagleBone Devices
 All Pages
CCR User
See Also
BeagleBone Tools

CCR_User performs several tasks related to user accounts.

Key Description
available since 2017-01
package filename ccr_user-xyz.deb
configuration /opt/ccr/files/user.ccr
cron job /etc/cron.d/ccr_user
script /usr/bin/ccr_user.sh [<newusername> [<newpassword>]]
example sudo ccr_user.sh bob secret

Changes performed by ccr_user:

  • disable the default root account
  • disable the default debian account
  • locks down sshd
    • use PAM
    • disallow root logins
    • disallow logins from accounts with empty passwords
  • sets a motd file
  • sets a issue file (local logins)
  • sets a issue.net file (ssh logins)
  • creates an account with access to sudo

The user account and password to use when creating the account is stored in /opt/ccr/files/user.ccr. If this file does not exist, then ccr_user.sh will default to "ccr" as the username, and "icx100" as the password.

Warning
Do not keep the default password of icx100 on the ccr account! Use passwd or chgpasswd to modify the password. If the ccr account wont be used, either delete the account (sudo userdel -r ccr) or disable the account (sudo passwd –lock ccr).

To install:

sudo dpkg -i ccr_user-*.deb

Then either reboot the device, or manually run the script:

sudo ccr_user.sh

The username and password to use for the new backup account can also be provided on the command-line when manually calling the script. This will automatically update /opt/ccr/files/user.ccr. For example:

sudo ccr_user.sh bob secret

A message is logged to syslog when ccr_user.sh adds a new account:

Jan 9 00:59:39 bbbw-testing ccr[11892]: /usr/bin/ccr_user.sh: creating backup account 'bob'
See Also
/opt/ccr/files/user.ccr