Added sshd_config modifications

Author: jasonheecs

setup.sh

@@ -29,4 +29,8 @@ fi
 addUserAccount "${username}" "${password}"
 
 read -rp $'Paste in the public SSH key for the new user:\n' sshKey
-addSSHKey "${username}" "${sshKey}"
+addSSHKey "${username}" "${sshKey}"
+changeSSHConfig
+setupUfw
+
+sudo service ssh restart

setupLibrary.sh

@@ -29,4 +29,14 @@ function execAsUser() {
     local exec_command=${2}
 
     sudo -u "${username}" -H sh -c "${exec_command}"
+}
+
+function changeSSHConfig() {
+    sudo sed -re 's/^(\#?)(PasswordAuthentication)([[:space:]]+)yes/\2\3no/' -i.$(echo 'old') /etc/ssh/sshd_config
+    sudo sed -re 's/^(\#?)(PermitRootLogin)([[:space:]]+)(.*)/PermitRootLogin no/' -i /etc/ssh/sshd_config
+}
+
+function setupUfw() {
+    sudo ufw allow OpenSSH
+    yes y | sudo ufw enable
 }

tests/tests.sh

@@ -40,10 +40,31 @@ function testAddingOfSSHKey() {
     assertEquals "${ssh_file}" "${dummy_key}"
 }
 
+function testChangeSSHConfig() {
+    changeSSHConfig
+
+    local ssh_config="$(sudo cat /etc/ssh/sshd_config)"
+    assertContains "PasswordAuthentication no" "${ssh_config}"
+    assertContains "PermitRootLogin no" "${ssh_config}"
+}
+
+function testUfw() {
+    setupUfw
+
+    local ufw_status=$(sudo ufw status)
+    assertContains "Status: active" "${ufw_status}"
+    assertContains "OpenSSH" "${ufw_status}"
+}
+
 function testTeardown () {
     echo "Test Teardown"
+
     deleteTestUser
     revertSudoers
+    revertSSHConfig
+
+    sudo ufw delete allow OpenSSH
+    sudo ufw disable
 }
 
 ### Helper Functions ###
@@ -55,12 +76,17 @@ function deleteTestUser() {
 
 function revertSudoers() {
     sudo cp /etc/sudoers.bak /etc/sudoers
-    sudo rm -rf sudoers.bak
+    sudo rm -rf /etc/sudoers.bak
 }
 
 function disableSudoPassword() {
     sudo cp /etc/sudoers /etc/sudoers.bak
     sudo bash -c "echo '${test_user_account} ALL=(ALL) NOPASSWD: ALL' | (EDITOR='tee -a' visudo)"
 }
 
+function revertSSHConfig() {
+    sudo cp /etc/ssh/sshd_config.old /etc/ssh/sshd_config
+    sudo rm -rf /etc/ssh/sshd_config.old
+}
+
 runUnitTests