See Also: BeagleBone Tools

CCR_User performs several tasks related to user accounts.

Key	Description
available since	2017-01
package filename	`ccr_user-xyz.deb`
configuration	`/opt/ccr/files/user.ccr`
cron job	`/etc/cron.d/ccr_user`
script	`/usr/bin/ccr_user.sh [<newusername> [<newpassword>]]`
example	`sudo ccr_user.sh bob secret`

Changes performed by ccr_user:

disable the default root account
disable the default debian account
locks down sshd
- use PAM
- disallow root logins
- disallow logins from accounts with empty passwords
sets a motd file
sets a issue file (local logins)
sets a issue.net file (ssh logins)
creates an account with access to sudo

The user account and password to use when creating the account is stored in /opt/ccr/files/user.ccr. If this file does not exist, then ccr_user.sh will default to "ccr" as the username, and "icx100" as the password.

Warning: Do not keep the default password of icx100 on the ccr account! Use passwd or chgpasswd to modify the password. If the ccr account wont be used, either delete the account (sudo userdel -r ccr) or disable the account (sudo passwd –lock ccr).

To install:

sudo dpkg -i ccr_user-*.deb

Then either reboot the device, or manually run the script:

sudo ccr_user.sh

The username and password to use for the new backup account can also be provided on the command-line when manually calling the script. This will automatically update /opt/ccr/files/user.ccr. For example:

sudo ccr_user.sh bob secret

A message is logged to syslog when ccr_user.sh adds a new account:

Jan 9 00:59:39 bbbw-testing ccr[11892]: /usr/bin/ccr_user.sh: creating backup account 'bob'

See Also: /opt/ccr/files/user.ccr