Changeset 7454

Timestamp:

Jan 31, 2010, 1:20:34 PM (15 years ago)

Author:

richardvm

Message:

Fixed: disable password authentication in ssh, sshtun private key

File:

• 2.0/nanobsd/nanobsd/cfg/nanobsd.wleiden (modified) (3 diffs)

2.0/nanobsd/nanobsd/cfg/nanobsd.wleiden

@@ -206 +206 @@
 )
 
-# Customize nsd
-cust_nsd() (
+# Customize Security
+cust_security() (
         chroot ${NANO_WORLDDIR} sh -c "chown -R bind /var/db/nsd"
         chroot ${NANO_WORLDDIR} sh -c "chmod u+x /usr/local/etc/rc.d/nsd"
+        chroot ${NANO_WORLDDIR} sh -c "chmod 400 /usr/local/sshtun/sshkey"
 )
 
@@ -231 +232 @@
 cust_disable_ssh_password () {
   chroot ${NANO_WORLDDIR} sh -c "mv /etc/ssh/sshd_config /tmp"
-  chroot ${NANO_WORLDDIR} sh -c "cat /tmp/sshd_config | sed -e 's/\#PasswordAuthentication\ no/PasswordAuthentication\ no/' > /etc/ssh/sshd_config"
+  chroot ${NANO_WORLDDIR} sh -c "cat /tmp/sshd_config | sed -e 's/\#UsePAM\ yes/UsePAM\ no/g' > /etc/ssh/sshd_config"
   chroot ${NANO_WORLDDIR} sh -c "rm /tmp/sshd_config"
 }
@@ -303 +304 @@
 customize_cmd cust_set_root_password
 customize_cmd cust_apply_nanobsd_patches
-customize_cmd cust_nsd 
+customize_cmd cust_security