RYDE-WORK/ballistica
1
0
Fork 0
mirror of https://github.com/RYDE-WORK/ballistica.git synced 2026-02-05 23:13:46 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Syncing latest changes between public/private.

Browse Source
This commit is contained in:
Eric Froemling 2020-03-25 20:00:14 -07:00
parent b81cf9d77d
commit 51e7c32d1c
2 changed files with 22 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.idea/dictionaries/ericf.xml generated
View File

@ -312,6 +312,7 @@
<w>confighash</w> <w>confighash</w>
<w>configkey</w> <w>configkey</w>
<w>configparser</w> <w>configparser</w>
<w>configpath</w>
<w>connectattr</w> <w>connectattr</w>
<w>containerwidget</w> <w>containerwidget</w>
<w>contentmanager</w> <w>contentmanager</w>

27
tools/snippets
View File

@ -575,6 +575,25 @@ def push_ipa() -> None:
ios.push_ipa(root, modename) ios.push_ipa(root, modename)
def fix_mac_ssh() -> None:
"""Turn off mac ssh password access.
(This totally doesn't belong in this project btw..)
"""
configpath = '/etc/ssh/sshd_config'
with open(configpath) as infile:
lines = infile.readlines()
index = lines.index('#PasswordAuthentication yes\n')
lines[index] = 'PasswordAuthentication no\n'
index = lines.index('#ChallengeResponseAuthentication yes\n')
lines[index] = 'ChallengeResponseAuthentication no\n'
index = lines.index('UsePAM yes\n')
lines[index] = 'UsePAM no\n'
with open(configpath, 'w') as outfile:
outfile.write(''.join(lines))
print('SSH config updated successfully!')
def check_mac_ssh() -> None: def check_mac_ssh() -> None:
"""Make sure ssh password access is turned off. """Make sure ssh password access is turned off.
@ -585,12 +604,8 @@ def check_mac_ssh() -> None:
lines = infile.read().splitlines() lines = infile.read().splitlines()
if ('UsePAM yes' in lines or '#PasswordAuthentication yes' in lines if ('UsePAM yes' in lines or '#PasswordAuthentication yes' in lines
or '#ChallengeResponseAuthentication yes' in lines): or '#ChallengeResponseAuthentication yes' in lines):
print('ERROR: ssh config is allowing password access\n' print('ERROR: ssh config is allowing password access.\n'
'To fix: sudo emacs -nw /etc/ssh/sshd_config\n' 'To fix: sudo tools/snippets fix_mac_ssh')
'"#PasswordAuthentication yes" -> "PasswordAuthentication no"\n'
'"#ChallengeResponseAuthentication yes" -> '
'"ChallengeResponseAuthentication no"\n'
'"UsePam yes" -> "UsePam no"\n')
sys.exit(255) sys.exit(255)
print('password ssh auth seems disabled; hooray!') print('password ssh auth seems disabled; hooray!')