Luke

Installation

• Debian Stretch
• Use LVM guided setup, separate partition for home, var and tmp
• Selection, alleen ssh server

Config

• /etc/sshd/sshd_config disable root user login

Install utitilities

root@luke:/home/luke# apt install screen htop tree curl mlocate unzip ntp

Add user rijk

root@luke:/home/luke# adduser rijk

rijk@luke:~$ mkdir .ssh

rijk@RijksKReich:~$ cat ~/.ssh/id_rsa.pub | ssh luke 'cat >> .ssh/authorized_keys'

Log all activity

https://askubuntu.com/questions/93566/how-to-log-all-bash-commands-by-all-users-on-a-server

root@luke:/home/rijk# vim /etc/bash.bashrc 

add line: export PROMPT_COMMAND='RETRN_VAL=$?;logger -p local6.debug "$(whoami) [$$]: $(history 1 | sed "s/^[ ]*[0-9]\+[ ]*//" ) [$RETRN_VAL]"'

root@luke:/home/rijk# vim /etc/rsyslog.d/bash.conf

add line: local6.* /var/log/commands.log

root@luke:/home/rijk# vim /etc/logrotate.d/rsyslog

add line after /var/log/messages: /var/log/commands.log

root@luke:/home/rijk# systemctl restart rsyslog

Add user log on olimex, luke and ppl

root@luke:/home/luke# adduser log

root@a20-olimex:/home/rijk# adduser log

root@paardenpad:~# adduser log

Add to adm group

root@luke:/home/luke# usermod -aG adm log

root@paardenpad:~# usermod -aG adm log

Push ssh key from olimex to luke and ppl

log@a20-olimex:~$ ssh-keygen -t rsa
log@a20-olimex:~$ ssh-copy-id ppl
log@a20-olimex:~$ ssh-copy-id luke

Create log on ppl and create cronjob

root@paardenpad:/var/log# touch commands.log
root@paardenpad:/var/log# chown log:adm commands.log 

log@a20-olimex:~$ crontab -e

10 * * * * scp luke:/var/log/commands.log /home/log/commands.log
15 * * * * scp /home/log/commands.log ppl:/var/log/commands.log