scripts
/
automate
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Commit before push.

This commit is contained in:
Cyteen May 2020-02-20 00:17:19 +00:00
parent 601c5f76a5
commit a0ee00aa8a
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
020_molly-guard.sh
View File

@ -1,9 +1,16 @@
#!/usr/bin/env bash #!/usr/bin/env bash
# Molly-Guard try to block you from accidentally running or shutting down or rebooting Linux servers via ssh. # Molly-Guard try to block you from accidentally running or shutting down or rebooting Linux servers via ssh.
# molly-guard was primarily designed to shield SSH connections. This functionality (which should arguably be provided by the openssh-server package) is implemented in:
#
# /etc/molly-guard/run.d/30-query-hostname.
#
# Before molly-guard invokes the real command, all scripts in /etc/molly-guard/run.d/ have to run and exit successfully; else, it aborts the command.
apt-get install -y molly-guard apt-get install -y molly-guard
# sudo and tmux stop detection of the SSH session. (It also affects screen the same way - this is a known issue listed in man molly-guard.) # sudo and tmux stop detection of the SSH session. (It also affects screen the same way - this is a known issue listed in man molly-guard.)
cat > /etc/sudoers.d/molly-guard << EOF cat > /etc/sudoers.d/molly-guard << EOF
Defaults env_keep += SSH_CONNECTION Defaults env_keep += SSH_CONNECTION
EOF EOF