Updated Sudo and Program directories

Program directories configured for /root/tickets, and /root/scripts for
running of program.

alias and sudo set for sysadmin user.

Author: rmcmillan34

docker/setup/setup-sysadmin-user.sh

@@ -10,27 +10,20 @@ echo "[+] Creating user: $USERNAME"
 if id "$USERNAME" >/dev/null 2>&1; then
     echo "[i] User $USERNAME already exists"
 else
-    # Detect Debian-based distros (has /etc/debian_version)
+    # Detect Debian-based distros
     if [ -f /etc/debian_version ]; then
         echo "[+] Detected Debian-based system — using adduser"
-        # --disabled-password: user can't log in via password
-        # --gecos "": skip interactive prompts
-        # --home: specify home directory
-        # --shell: specify default shell
         adduser --disabled-password --gecos "" --home "$USER_HOME" --shell /bin/bash "$USERNAME"
     else
         echo "[+] Using useradd for non-Debian system"
-        # -m: create home
-        # -d: set home path
-        # -s: set shell
         useradd -m -d "$USER_HOME" -s /bin/bash "$USERNAME"
     fi
 fi
 
 echo "[+] Create sysadmin HOME directory and set permissions"
 # Ensure home directory exists and is owned by the user
 mkdir -p "$USER_HOME"
-chown -R "$USERNAME" "$USER_HOME" || true
+chown -R "$USERNAME:$USERNAME" "$USER_HOME" || true
 
 # Ensure .bashrc exists
 if [[ ! -f "$USER_HOME/.bashrc" ]]; then
@@ -39,13 +32,18 @@ fi
 
 # Add alias for the sysadmin user
 if ! grep -q "alias sysadmin-sim" "$USER_HOME/.bashrc"; then
-    echo "alias sysadmin-sim='bash /bin/sysadmin-sim/sysadmin-sim-config.sh'" >> "$USER_HOME/.bashrc"
+    echo "alias sysadmin-sim='sudo /bin/sysadmin-sim/sysadmin-sim-config.sh'" >> "$USER_HOME/.bashrc"
     echo "[+] Added sysadmin-sim alias to $USER_HOME/.bashrc"
 fi
 
-echo "[+] Disabling sudo and restricting privilege escalation tools"
+# Add the sysadmin user to sudoers securely
+if ! grep -q "$USERNAME" /etc/sudoers.d/sysadmin-sim 2>/dev/null; then
+    echo "$USERNAME ALL=(ALL) NOPASSWD: /bin/sysadmin-sim/sysadmin-sim-config.sh" > /etc/sudoers.d/sysadmin-sim
+    chmod 440 /etc/sudoers.d/sysadmin-sim
+    echo "[+] Configured sudo access for $USERNAME"
+fi
 
-# Create /etc/sudoers.d if missing and restrict sudo usage for sysadmin
+echo "[+] Disabling sudo and restricting privilege escalation tools"
 if command -v sudo >/dev/null 2>&1; then
     mkdir -p /etc/sudoers.d
     echo "$USERNAME ALL=(ALL) NOPASSWD: /bin/false" > /etc/sudoers.d/disable-sudo
@@ -60,9 +58,5 @@ for binary in /usr/bin/su /usr/bin/pkexec; do
     fi
 done
 
-# Lock root account if passwd and shadow file are available
-if command -v passwd >/dev/null 2>&1 && [ -f /etc/shadow ]; then
-    passwd -l root || true
-fi
-
 echo "[+] Setup complete for user: $USERNAME"
+

docker/ubuntu/Dockerfile.ubuntu

@@ -27,6 +27,9 @@ RUN apt-get update && \
 COPY docker/setup/setup-sysadmin-user.sh /tmp/setup-sysadmin-user.sh
 RUN chmod +x /tmp/setup-sysadmin-user.sh && /tmp/setup-sysadmin-user.sh && rm /tmp/setup-sysadmin-user.sh
 
+# Set sudo NOPASSWD for the sysadmin user to access the simulator
+RUN echo "sysadmin ALL=(ALL) NOPASSWD: /bin/sysadmin-sim/sysadmin-sim-config.sh" >> /etc/sudoers
+
 # SSH banner files
 COPY docker/setup/login-banner.player.txt /tmp/login-banner.player.txt
 COPY docker/setup/login-banner.admin.txt /tmp/login-banner.admin.txt
@@ -43,6 +46,19 @@ RUN mkdir -p /bin/sysadmin-sim
 COPY src/scripts/sysadmin-sim-config.sh /bin/sysadmin-sim/sysadmin-sim-config.sh
 RUN chmod +x /root/sysadmin-sim-config.sh
 
+# Create directories for scripts and tickets
+RUN mkdir -p /bin/sysadmin-sim /etc/.sysadmin-sim /root/tickets /root/scripts
+
+# Copy the main simulator script
+COPY src/scripts/sysadmin-sim-config.sh /bin/sysadmin-sim/sysadmin-sim-config.sh
+RUN chmod +x /bin/sysadmin-sim/sysadmin-sim-config.sh
+
+# Copy ticket files and scripts
+COPY src/tickets/ /root/tickets/
+COPY src/scripts/ /root/scripts/
+RUN chmod -R 700 /root/tickets /root/scripts
+
+
 # Set up Entrypoint
 COPY docker/setup/entrypoint.sh /usr/local/bin/entrypoint.sh
 RUN chmod +x /usr/local/bin/entrypoint.sh

src/tickets/ticket-018.yaml

@@ -0,0 +1,25 @@
+id: ticket-018
+title: "Adjust process priority with nice"
+difficulty: medium
+description: |
+  A script has been running with a low priority, causing it to be preempted by other processes.
+  Adjust the priority of the process named 'slowtask' to a nice value of 5.
+objectives:
+  - Use the `nice` command to set the priority of 'slowtask' to 5
+exam_objectives:
+  - exam: "Linux+"
+    version: "XK0-005"
+    domain: "1"
+    objective_id: "1.1"
+    description: "Manage files and directories using command-line utilities"
+tools:
+  - nice
+  - ps
+tags: [process, priority, system]
+setup_script: "/bin/sysadmin-sim/ticketsticket-018-setup.sh"
+strikedown_script: "/bin/sysadmin-sim/ticket-018-strikedown.sh"
+check_script: "/bin/sysadmin-sim/ticket-018-check.sh"
+compatible_distributions: [ubuntu, debian, fedora, rocky, alpine]
+architecture: [amd64, arm64]
+flag: LINUX{a9cb52f8c68e24307e88b88173890393}
+