SSH: Add option to enable sudo for ssh user.

- Disable root login

Signed-off-by: Tobias K <6317548+theCalcaholic@users.noreply.github.com>
Signed-off-by: Tobias Knöppler <6317548+theCalcaholic@users.noreply.github.com>

bin/ncp/NETWORKING/SSH.sh

@@ -41,6 +41,11 @@ configure()
   # Reenable pi user
   chsh -s /bin/bash "$USER"
 
+  [[ "$SUDO" == "yes" ]] && {
+    usermod -aG sudo "$USER"
+    echo "Enabled sudo for $USER"
+  }
+
   # Check for insecure default pi password ( taken from old jessie method )
   # TODO Due to Debian bug #1003151 with mkpasswd this feature is not working properly at the moment - https://www.mail-archive.com/debian-bugs-dist@lists.debian.org/msg1837456.html
   #local SHADOW SALT HASH

etc/ncp-config.d/SSH.cfg

@@ -29,6 +29,12 @@
       "name": "Confirm",
       "value": "1234",
       "type": "password"
+    },
+    {
+      "id": "SUDO",
+      "name": "Enable sudo",
+      "value": "no",
+      "type": "bool"
     }
   ]
 }

ncp.sh

@@ -132,6 +132,7 @@ EOF
   id -u "$WEBADMIN" &>/dev/null || useradd --home-dir /nonexistent "$WEBADMIN"
   echo -e "$WEBPASSWD\n$WEBPASSWD" | passwd "$WEBADMIN"
   chsh -s /usr/sbin/nologin "$WEBADMIN"
+  chsh -s /usr/sbin/nologin root
 
   ## NCP LAUNCHER
   mkdir -p /home/www