forked from evolix/evocheck
parent
d10acee88e
commit
7fcf918031
20
evocheck.sh
20
evocheck.sh
|
@ -1148,14 +1148,20 @@ check_usrsharescripts() {
|
||||||
test "$expected" = "$actual" || failed "IS_USRSHARESCRIPTS" "/usr/share/scripts must be $expected"
|
test "$expected" = "$actual" || failed "IS_USRSHARESCRIPTS" "/usr/share/scripts must be $expected"
|
||||||
}
|
}
|
||||||
check_sshpermitrootno() {
|
check_sshpermitrootno() {
|
||||||
if is_debian_stretch || is_debian_buster; then
|
sshd_args="-C addr=,user=,host=,laddr=,lport=0"
|
||||||
if grep -q "^PermitRoot" /etc/ssh/sshd_config; then
|
if is_debian_jessie || is_debian_stretch; then
|
||||||
grep -E -qi "PermitRoot.*no" /etc/ssh/sshd_config \
|
# Noop, we'll use the default $sshd_args
|
||||||
|| failed "IS_SSHPERMITROOTNO" "PermitRoot should be set at no"
|
:
|
||||||
fi
|
elif is_debian_buster; then
|
||||||
|
sshd_args="${sshd_args},rdomain="
|
||||||
else
|
else
|
||||||
grep -E -qi "PermitRoot.*no" /etc/ssh/sshd_config \
|
# NOTE: From Debian Bullseye 11 onward, with OpenSSH 8.1, the argument
|
||||||
|| failed "IS_SSHPERMITROOTNO" "PermitRoot should be set at no"
|
# -T doesn't require the additional -C.
|
||||||
|
sshd_args=
|
||||||
|
fi
|
||||||
|
# XXX: We want parameter expension here
|
||||||
|
if ! (sshd -T $sshd_args | grep -q 'permitrootlogin no'); then
|
||||||
|
failed "IS_SSHPERMITROOTNO" "PermitRoot should be set to no"
|
||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
check_evomaintenanceusers() {
|
check_evomaintenanceusers() {
|
||||||
|
|
Loading…
Reference in a new issue