From ae012977ab951d8f3e1ff523cafa744256c390f0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bj=C3=B6rn=20Bidar?= Date: Fri, 2 Mar 2018 09:59:50 +0100 Subject: [PATCH] remove sudo and added root check Removed sudo because it made no sense running the script not as root when nearly all of the commands where run as root. --- ubuntu/18.04/install.sh | 53 ++++++++++++++++++++++------------------- 1 file changed, 28 insertions(+), 25 deletions(-) diff --git a/ubuntu/18.04/install.sh b/ubuntu/18.04/install.sh index 639dce2..3a61f08 100644 --- a/ubuntu/18.04/install.sh +++ b/ubuntu/18.04/install.sh @@ -11,15 +11,20 @@ # Update our machine to the latest code if we need to. # +if [ ! $(id -u) ] ; then + echo 'This script must be run with root privileges' >&2 + exit 1 +fi # Check if we have the bionic-proposed sources list -sudo cat /etc/apt/sources.list | grep bionic-proposed > /dev/null + +cat /etc/apt/sources.list | grep bionic-proposed > /dev/null if [ "$?" == "1" ]; then -sudo bash -c 'echo "deb http://archive.ubuntu.com/ubuntu/ bionic-proposed restricted main multiverse universe" >> /etc/apt/sources.list <> /etc/apt/sources.list <&2 @@ -32,48 +37,48 @@ fi # # Install the xrdp service so we have the auto start behavior -sudo apt install -y xrdp +apt install -y xrdp -sudo systemctl stop xrdp -sudo systemctl stop xrdp-sesman +systemctl stop xrdp +systemctl stop xrdp-sesman # Configure the installed XRDP ini files. # use vsock transport. -sudo sed -i_orig -e 's/use_vsock=false/use_vsock=true/g' /etc/xrdp/xrdp.ini +sed -i_orig -e 's/use_vsock=false/use_vsock=true/g' /etc/xrdp/xrdp.ini # use rdp security. -sudo sed -i_orig -e 's/security_layer=negotiate/security_layer=rdp/g' /etc/xrdp/xrdp.ini +sed -i_orig -e 's/security_layer=negotiate/security_layer=rdp/g' /etc/xrdp/xrdp.ini # remove encryption validation. -sudo sed -i_orig -e 's/crypt_level=high/crypt_level=none/g' /etc/xrdp/xrdp.ini +sed -i_orig -e 's/crypt_level=high/crypt_level=none/g' /etc/xrdp/xrdp.ini # disable bitmap compression since its local its much faster -sudo sed -i_orig -e 's/bitmap_compression=true/bitmap_compression=false/g' /etc/xrdp/xrdp.ini +sed -i_orig -e 's/bitmap_compression=true/bitmap_compression=false/g' /etc/xrdp/xrdp.ini # use the default lightdm x display -# sudo sed -i_orig -e 's/X11DisplayOffset=10/X11DisplayOffset=0/g' /etc/xrdp/sesman.ini +# sed -i_orig -e 's/X11DisplayOffset=10/X11DisplayOffset=0/g' /etc/xrdp/sesman.ini # Changed the allowed_users -sudo sed -i_orig -e 's/allowed_users=console/allowed_users=anybody/g' /etc/X11/Xwrapper.config +sed -i_orig -e 's/allowed_users=console/allowed_users=anybody/g' /etc/X11/Xwrapper.config # Enable the hv_sock module -sudo rmmod vmw_vsock_vmci_transport -sudo rmmod vsock -sudo modprobe hv_sock +rmmod vmw_vsock_vmci_transport +rmmod vsock +modprobe hv_sock # Blacklist the vmw module -sudo cat /etc/modprobe.d/blacklist.conf | grep vmw_vsock_vmci_transport > /dev/null +cat /etc/modprobe.d/blacklist.conf | grep vmw_vsock_vmci_transport > /dev/null if [ "$?" == "1" ]; then -sudo bash -c 'echo "blacklist vmw_vsock_vmci_transport" >> /etc/modprobe.d/blacklist.conf <> /etc/modprobe.d/blacklist.conf < /dev/null + cat /etc/modules | grep hv_sock > /dev/null if [ "$?" == "1" ]; then -sudo bash -c 'echo "hv_sock" >> /etc/modules <> /etc/modules </etc/polkit-1/localauthority.conf.d/02-allow-colord.conf </etc/polkit-1/localauthority.conf.d/02-allow-colord.conf <