Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity

notify when attempting to use ssh but user is member of group ssh

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-08 03:10:41 -05:00
parent cea598dc1a
commit 3bd0b3f837
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 25 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
usr/lib/security-misc/pam_tally2-info
View File

@ -3,8 +3,31 @@
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
## https://forums.whonix.org/t/etc-security-hardening-console-lockdown/8592
if grep -q "accessfile=/etc/security/access-security-misc.conf" /etc/pam.d/common-account 2>/dev/null; then
grep_result="$(grep "accessfile=/etc/security/access-security-misc.conf" /etc/pam.d/common-account 2>/dev/null)"
if ! echo "$grep_result" | grep -q "#" ; then
## https://forums.whonix.org/t/etc-security-hardening-console-lockdown/8592
if [ "$PAM_SERVICE" = "sshd" ]; then
if id --name --groups --zero "$PAM_USER" | grep --quiet --null-data --line-regexp --fixed-strings "ssh"; then
ssh_allowed=true
fi
if [ ! "$ssh_allowed" = "true" ]; then
echo "$0: ERROR: PAM_USER: $PAM_USER is not a member of group 'ssh'" >&2
echo "$0: To unlock, run the following command as superuser:" >&2
echo "$0: (If you still have a sudo/root shell somewhere.)" >&2
echo "" >&2
echo "addgroup $PAM_USER ssh" >&2
echo "" >&2
echo "$0: However, possibly unlock procedure is required." >&2
echo "$0: First boot into recovery mode at grub boot menu and then run above command." >&2
echo "$0: See also:" >&2
echo "https://www.whonix.org/wiki/root#ssh" >&2
echo "" >&2
exit 0
fi
fi
if id --name --groups --zero "$PAM_USER" | grep --quiet --null-data --line-regexp --fixed-strings "console"; then
console_allowed=true
fi