Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-08-03 03:36:29 -04:00
Code Issues Projects Releases Packages Wiki Activity

refactor: initial commit

Browse source
This commit is contained in:
Ben Grande 2023-11-13 14:33:28 +00:00
commit f6ac229306
No known key found for this signature in database
GPG key ID: 00C64E14F51F9E56
594 changed files with 18600 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
salt/sys-ssh/files/admin/policy/default.policy Normal file
View file

@ -0,0 +1,9 @@
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later
## Do not modify this file, create a new policy with with a lower number in the
## file name instead. For example `30-user.policy`.
qusal.Ssh * @anyvm @default ask target={{ sls_path }} default_target={{ sls_path }}
qusal.Ssh * @anyvm @anyvm deny
## vim:ft=qrexecpolicy

15
salt/sys-ssh/files/client/systemd/qubes-ssh-forwarder.socket Normal file
View file

@ -0,0 +1,15 @@
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com
#
# SPDX-License-Identifier: AGPL-3.0-or-later
[Unit]
Description=Forward connection to SSH over Qrexec
ConditionPathExists=/var/run/qubes-service/ssh-setup
[Socket]
ListenStream=127.0.0.1:840
BindToDevice=lo
Accept=true
[Install]
WantedBy=multi-user.target

11
salt/sys-ssh/files/client/systemd/qubes-ssh-forwarder@.service Normal file
View file

@ -0,0 +1,11 @@
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com
#
# SPDX-License-Identifier: AGPL-3.0-or-later
[Unit]
Description=Forward connection to SSH over Qrexec
[Service]
ExecStart=/usr/bin/qrexec-client-vm @default qusal.Ssh
StandardInput=socket
StandardOutput=inherit

2
salt/sys-ssh/files/server/rc.local Normal file
View file

@ -0,0 +1,2 @@
systemctl unmask ssh
systemctl --no-block restart ssh

9
salt/sys-ssh/files/server/rpc/qusal.Ssh Executable file
View file

@ -0,0 +1,9 @@
#!/bin/sh
# SPDX-FileCopyrightText: 2022 unman <unman@thirdeyesecurity.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later
set -eu
exec socat STDIO TCP:localhost:22

9
salt/sys-ssh/files/server/sshd_config.d/sys-ssh.conf Normal file
View file

@ -0,0 +1,9 @@
# vim: ft=sshdconfig
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later
Match User user Host 127.0.0.1
PermitEmptyPasswords yes
AuthenticationMethods none