diff --git a/kali-config/common/includes.chroot/usr/lib/live/config/0031-kali-user-setup b/kali-config/common/includes.chroot/usr/lib/live/config/0031-kali-user-setup index cdde35e..5fc6df0 100755 --- a/kali-config/common/includes.chroot/usr/lib/live/config/0031-kali-user-setup +++ b/kali-config/common/includes.chroot/usr/lib/live/config/0031-kali-user-setup @@ -14,15 +14,17 @@ configure_zsh() { } configure_usergroups() { - addgroup --system kaboxer || true # Ensures the group exists - addgroup --system wireshark || true # Ensures the group exists + # Ensure those groups exist + addgroup --system kaboxer || true + addgroup --system wireshark || true + # adm - read access to log files - # kaboxer - for kaboxer # dialout - for serial port access + # kaboxer - for kaboxer # wireshark - capture sessions without being root - kali_groups="adm,kaboxer,dialout,wireshark" + kali_groups="adm,dialout,kaboxer,wireshark" - usermod -a -G $kali_groups kali + usermod -a -G $kali_groups kali || true } # Avoid configuring multiple times in case persistence is enabled diff --git a/kali-config/common/includes.installer/kali-finish-install b/kali-config/common/includes.installer/kali-finish-install index 99d691a..11e7e2e 100755 --- a/kali-config/common/includes.installer/kali-finish-install +++ b/kali-config/common/includes.installer/kali-finish-install @@ -51,18 +51,16 @@ configure_zsh() { done } -# This is generically named in case we want to add other groups in the future. configure_usergroups() { - # Create the kaboxer group if needed + # Ensure those groups exist addgroup --system kaboxer || true - # Create the wireshark group if needed addgroup --system wireshark || true # adm - read access to log files - # kaboxer - for kaboxer # dialout - for serial access + # kaboxer - for kaboxer # wireshark - capture sessions in wireshark - kali_groups="adm,kaboxer,dialout,wireshark" + kali_groups="adm,dialout,kaboxer,wireshark" for user in $(get_user_list | grep -xv root); do echo "INFO: adding user '$user' to groups '$kali_groups'"