OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	07/01/2022 06:30:50 AM	rwxr-xr-x
📄 __init__.py	0 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📁 __pycache__	-	07/01/2022 06:30:50 AM	rwxr-xr-x
📄 boot_proto.py	339 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📄 config.py	4.39 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 config_custom_script.py	3.07 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 config_file.py	3.2 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 config_namespace.py	346 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📄 config_nic.py	8.63 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 config_passwd.py	2.38 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 config_source.py	307 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📄 guestcust_error.py	442 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📄 guestcust_event.py	492 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📄 guestcust_state.py	389 bytes	05/18/2022 04:04:36 PM	rw-r--r--
📄 guestcust_util.py	5.03 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 ipv4_mode.py	1.1 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 nic.py	3.15 KB	05/18/2022 04:04:36 PM	rw-r--r--
📄 nic_base.py	3.83 KB	05/18/2022 04:04:36 PM	rw-r--r--

Editing: config_passwd.py

#    Copyright (C) 2016 Canonical Ltd.
#    Copyright (C) 2016 VMware INC.
#
#    Author: Maitreyee Saikia <msaikia@vmware.com>
#
#    This file is part of cloud-init. See LICENSE file for license information.

import logging
import os

from cloudinit import subp, util

LOG = logging.getLogger(__name__)

class PasswordConfigurator(object):
    """
    Class for changing configurations related to passwords in a VM. Includes
    setting and expiring passwords.
    """

def configure(self, passwd, resetPasswd, distro):
        """
        Main method to perform all functionalities based on configuration file
        inputs.
        @param passwd: encoded admin password.
        @param resetPasswd: boolean to determine if password needs to be reset.
        @return cfg: dict to be used by cloud-init set_passwd code.
        """
        LOG.info("Starting password configuration")
        if passwd:
            passwd = util.b64d(passwd)
        allRootUsers = []
        for line in open("/etc/passwd", "r"):
            if line.split(":")[2] == "0":
                allRootUsers.append(line.split(":")[0])
        # read shadow file and check for each user, if its uid0 or root.
        uidUsersList = []
        for line in open("/etc/shadow", "r"):
            user = line.split(":")[0]
            if user in allRootUsers:
                uidUsersList.append(user)
        if passwd:
            LOG.info("Setting admin password")
            distro.set_passwd("root", passwd)
        if resetPasswd:
            self.reset_password(uidUsersList)
        LOG.info("Configure Password completed!")

def reset_password(self, uidUserList):
        """
        Method to reset password. Use passwd --expire command. Use chage if
        not succeeded using passwd command. Log failure message otherwise.
        @param: list of users for which to expire password.
        """
        LOG.info("Expiring password.")
        for user in uidUserList:
            try:
                subp.subp(["passwd", "--expire", user])
            except subp.ProcessExecutionError as e:
                if os.path.exists("/usr/bin/chage"):
                    subp.subp(["chage", "-d", "0", user])
                else:
                    LOG.warning(
                        "Failed to expire password for %s with error: %s",
                        user,
                        e,
                    )

# vi: ts=4 expandtab