Personal Computer World 2007 September/PCWSEP07.iso/Software/Linux/Linux Mint 3.0 Light/LinuxMint-3.0-Light.iso/casper/filesystem.squashfs/usr/lib/ubiquity/user-setup/user-setup-apply

Text File | 2007-04-12 | 4.9 KB | 186 lines

#! /bin/bash
set -e

. /usr/share/debconf/confmodule

if [ "$1" ]; then
    ROOT="$1"
    chroot=chroot
    log='log-output -t user-setup'
else
    ROOT=
    chroot=
    log=
fi

. /usr/lib/ubiquity/user-setup/functions.sh

# Set a password, via chpasswd.
# Use a heredoc rather than echo, to avoid the password
# showing in the process table. (However, this is normally
# only called when first installing the system, when root has no
# password at all, so that should be an unnecessary precaution).
#
# Pass in three arguments: the user, the password, and 'true' if the
# password has been pre-crypted (by preseeding).
setpassword () {
    local USER
    local PASSWD
    local PRECRYPTED
    USER="$1"
    PASSWD="$2"
    if [ "$3" = true ]; then
        PRECRYPTED=-e
    fi
    $chroot $ROOT chpasswd $PRECRYPTED -m <<EOF
$USER:$PASSWD
EOF
}

add_to_aliases () {
    if ! grep -qi ^root: $ROOT/etc/aliases 2>/dev/null; then
        cat <<EOF >>$ROOT/etc/aliases
# Added by installer for initial user
root:    $1
EOF
        if [ -x $ROOT/usr/bin/newaliases ]; then
            $log $chroot $ROOT /usr/bin/newaliases
        fi
    fi
}

# Enable/disable shadow passwords.
db_get passwd/shadow
if [ "$RET" = true ]; then
    $log $chroot $ROOT shadowconfig on
else
    $log $chroot $ROOT shadowconfig off
fi

if ! root_password; then
    # Was the root password preseeded encrypted?
    if db_get passwd/root-password-crypted && [ "$RET" ]; then
        # The root password was preseeded encrypted.
        ROOT_PW="$RET"
        PRECRYPTED=true
    else
        db_get passwd/root-password
        ROOT_PW="$RET"
        PRECRYPTED=false
    fi
    # Clear the root password from the database, and set the password.
    db_set passwd/root-password-crypted ''
    db_set passwd/root-password ''
    db_set passwd/root-password-again ''
    if [ "$ROOT_PW" ]; then
        setpassword root "$ROOT_PW" "$PRECRYPTED"
    fi
    ROOT_PW=
else
    # Just in case, clear any preseeded root password from the database
    # anyway.
    db_set passwd/root-password-crypted ''
    db_set passwd/root-password ''
    db_set passwd/root-password-again ''
fi

db_get passwd/make-user
if [ "$RET" = true ] && ! is_system_user; then
    if db_get passwd/user-password-crypted && [ "$RET" ]; then
        USER_PW="$RET"
        USER_PW_CRYPTED=true
    else
        db_get passwd/user-password
        USER_PW="$RET"
        USER_PW_CRYPTED=false
    fi

    if db_get passwd/user-uid && [ "$RET" ]; then
        if [ -x $ROOT/usr/sbin/adduser ]; then
            UIDOPT="--uid $RET"
        else
            UIDOPT="-u $RET"
        fi
    else
        UIDOPT=
    fi

    # Add the user to the database, using adduser in noninteractive
    # mode.
    db_get passwd/username
    USER="$RET"
    db_get passwd/user-fullname

    HOME_EXISTED=
    if [ -d "$ROOT/home/$USER" ]; then
        HOME_EXISTED=1
    fi

    if [ -x $ROOT/usr/sbin/adduser ]; then
        $log $chroot $ROOT adduser --disabled-password --gecos "$RET" $UIDOPT "$USER" >/dev/null || true
    else
        $log $chroot $ROOT useradd -c "$RET" -m "$USER" $UIDOPT >/dev/null || true
    fi

    # Clear the user password from the database.
    db_set passwd/user-password-crypted ''
    db_set passwd/user-password ''
    db_set passwd/user-password-again ''
    setpassword "$USER" "$USER_PW" "$USER_PW_CRYPTED"

    if [ "$HOME_EXISTED" ]; then
        # The user's home directory already existed before we called
        # adduser. This often means that a mount point under
        # /home/$USER was selected in (and thus created by) partman,
        # and the home directory may have ended up owned by root.
        $log $chroot $ROOT chown "$USER:$USER" "/home/$USER" >/dev/null || true
    fi

    if [ -n "$USER" ]; then
        for group in lpadmin scanner; do
            $log $chroot $ROOT addgroup --system $group >/dev/null 2>&1 || true
        done
        for group in adm audio cdrom dialout floppy video plugdev dip netdev powerdev lpadmin scanner; do
            $log $chroot $ROOT adduser "$USER" $group >/dev/null 2>&1 || true
        done
        add_to_aliases "$USER"
    fi

    db_get passwd/root-login
    if [ "$RET" = false ] && [ -n "$USER" ]; then
        # Ensure sudo is installed, and set up the user to be able
        # to use it.
        if [ ! -e $ROOT/etc/sudoers ]; then
            # try to work in d-i and out; it's better to
            # use apt-install in d-i
            apt-install sudo 2>/dev/null || $log $chroot apt-get -q -y install sudo || true
        fi
        if [ -e $ROOT/etc/sudoers ]; then
            $log $chroot $ROOT addgroup --system admin >/dev/null 2>&1 || true
            $log $chroot $ROOT adduser "$USER" admin >/dev/null 2>&1 || true
            cat <<EOF >>$ROOT/etc/sudoers

# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
EOF
        else
            # sudo failed to install, system won't be usable
            exit 1
        fi
        # Configure gksu to use sudo, via an alternative, if it's
        # installed and the alternative is registered.
        if $chroot update-alternatives --display libgksu-gconf-defaults >/dev/null 2>&1; then
            $log $chroot update-alternatives --set libgksu-gconf-defaults /usr/share/libgksu/debian/gconf-defaults.libgksu-sudo
            $log $chroot update-gconf-defaults
        fi
    fi
else
    # Just in case, clear any preseeded user password from the database
    # anyway.
    db_set passwd/user-password-crypted ''
    db_set passwd/user-password ''
    db_set passwd/user-password-again ''
fi

exit 0