#!/bin/sh -e

patch etc/sudoers <<"_EOF"
97a98,100
> 
> csit ALL=(root) NOPASSWD:ALL
> cisco ALL=(root) NOPASSWD:ALL
_EOF

patch etc/passwd <<"_EOF"
10a11,12
> csit:x:1001:1001:CSIT user:/tmp:/bin/sh
> cisco:x:1002:1002:Cisco user:/tmp:/bin/sh
_EOF

patch etc/shadow <<"_EOF"
1c1
< root::10933:0:99999:7:::
---
> root:5pcUkhKEiBBfw:16892:0:99999:7:::
10a11,12
> csit:5pcUkhKEiBBfw:16892:0:99999:7:::
> cisco:5piAVSAyGsbaI:16892:0:99999:7:::
_EOF

patch etc/group <<"_EOF"
27a28,29
> csit:x:1001:
> cisco:x:1002:
_EOF

patch etc/ssh/sshd_config <<"_EOF"
44c44
< #PermitRootLogin prohibit-password
---
> PermitRootLogin yes
_EOF