#!/usr/bin/env bash

# Molly-Guard try to block you from accidentally running or shutting down or rebooting Linux servers via ssh.

# molly-guard was primarily designed to shield SSH connections. This functionality (which should arguably be provided by the openssh-server package) is implemented in:
#
# /etc/molly-guard/run.d/30-query-hostname.
#
# Before molly-guard invokes the real command, all scripts in /etc/molly-guard/run.d/ have to run and exit successfully; else, it aborts the command.

apt install -y molly-guard

# sudo and tmux stop detection of the SSH session. (It also affects screen the same way - this is a known issue listed in man molly-guard.)
cat > /etc/sudoers.d/molly-guard << EOF
Defaults env_keep += SSH_CONNECTION
EOF