From f9970bc0db8861bf7fefac16f10888b7b99b2b42 Mon Sep 17 00:00:00 2001 From: Joerg Deckert Date: Sat, 11 Apr 2020 12:22:45 +0200 Subject: [PATCH] zabbix: activate pam_ssh_agent_auth --- zabbix/Makefile | 2 ++ zabbix/make.conf | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/zabbix/Makefile b/zabbix/Makefile index 9611069..316c4e6 100644 --- a/zabbix/Makefile +++ b/zabbix/Makefile @@ -17,6 +17,8 @@ postinstall: base/timesyncd.conf base/firstboot.start cp base/firstboot.start $(CHROOT)/etc/local.d/firstboot.start touch $(CHROOT)/firstboot sed -i 's/# %wheel ALL=(ALL) ALL/%wheel ALL=(ALL) ALL/' $(CHROOT)/etc/sudoers + sed -i 's#^auth.*$$#auth [success=2 default=ignore] pam_ssh_agent_auth.so file=~/.ssh/authorized_keys\nauth include system-auth#' $(CHROOT)/etc/pam.d/sudo + echo "Defaults env_keep += SSH_AUTH_SOCK" > $(CHROOT)/etc/sudoers.d/ssh_auth_sock $(inroot) useradd -m -G users,wheel -s /bin/bash --comment="virtual appliance admin" --uid 2000 admin $(inroot) passwd -d admin; $(inroot) passwd -e admin $(inroot) systemctl enable tmux@root.service diff --git a/zabbix/make.conf b/zabbix/make.conf index 7473a6d..0ff26f0 100644 --- a/zabbix/make.conf +++ b/zabbix/make.conf @@ -1,6 +1,6 @@ CFLAGS="-O2 -pipe" CXXFLAGS="-O2 -pipe" -USE="hardened justify pie ssp urandom xattr xtpax -fortran -pch -pic -prelink -profile -tcc" +USE="hardened justify pie ssp urandom xattr -fortran -pch -pic -prelink -profile -tcc" MAKEOPTS="-j5" ACCEPT_LICENSE="*" PYTHON_TARGETS="python3_6"