From f399308b2d6ffee1958f57d5e8883f42fa9437fb Mon Sep 17 00:00:00 2001
From: ReachableCEO <charles@turnsys.com>
Date: Thu, 10 Jul 2025 10:47:21 -0500
Subject: [PATCH] allow root to login to cockpit

---
 ProjectCode/ConfigFiles/Cockpit/disallowed-users | 2 ++
 ProjectCode/SetupNewSystem.sh                    | 3 +++
 2 files changed, 5 insertions(+)
 create mode 100644 ProjectCode/ConfigFiles/Cockpit/disallowed-users

diff --git a/ProjectCode/ConfigFiles/Cockpit/disallowed-users b/ProjectCode/ConfigFiles/Cockpit/disallowed-users
new file mode 100644
index 0000000..4afe878
--- /dev/null
+++ b/ProjectCode/ConfigFiles/Cockpit/disallowed-users
@@ -0,0 +1,2 @@
+#/etc/cockpit/disallowed-users
+# List of users which are not allowed to login to Cockpit
\ No newline at end of file
diff --git a/ProjectCode/SetupNewSystem.sh b/ProjectCode/SetupNewSystem.sh
index 66f7356..58347ae 100644
--- a/ProjectCode/SetupNewSystem.sh
+++ b/ProjectCode/SetupNewSystem.sh
@@ -279,6 +279,9 @@ function global-postPackageConfiguration() {
   cat ./ConfigFiles/NetworkDiscovery/lldpd >/etc/default/lldpd
   systemctl restart lldpd
 
+  cat ./ConfigFiles/Cockpit/disallowed-users >/etc/cockpit/disallowed-users
+  systemctl restart cockpit
+
   export LIBRENMS_CHECK
   LIBRENMS_CHECK="$(hostname | grep -c tsys-librenms || true)"