diff options
| author | acinonyx <acinonyx@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2011-02-02 18:50:50 +0000 |
|---|---|---|
| committer | acinonyx <acinonyx@3c298f89-4303-0410-b956-a3cf2f4a3e73> | 2011-02-02 18:50:50 +0000 |
| commit | d3c45eaee122516d0620bb523d09661a8e6f71ca (patch) | |
| tree | d9469fec9ea86ec2aee9608de06c97cf79117e88 | |
| parent | 1bba18de7a6c725ad4758393d329d50222a18f15 (diff) | |
[package] busybox: Disable telnet if an SSH public key for root exists (#8760)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25317 3c298f89-4303-0410-b956-a3cf2f4a3e73
| -rwxr-xr-x | package/busybox/files/telnet | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/package/busybox/files/telnet b/package/busybox/files/telnet index b8823379b..a1e17275a 100755 --- a/package/busybox/files/telnet +++ b/package/busybox/files/telnet @@ -10,8 +10,14 @@ has_root_pwd() { test -n "${pwd#!}" } +has_ssh_pubkey() { + ( test -x /usr/sbin/dropbear && grep -qs "^ssh-" /etc/dropbear/authorized_keys ) || \ + ( test -x /usr/sbin/sshd && grep -qs "^ssh-" /root/.ssh/authorized_keys ) +} + start() { - if ( ! has_root_pwd /etc/passwd && ! has_root_pwd /etc/shadow ) || \ + if ( ! has_ssh_pubkey && \ + ! has_root_pwd /etc/passwd && ! has_root_pwd /etc/shadow ) || \ ( [ ! -x /usr/sbin/dropbear ] && [ ! -x /usr/sbin/sshd ] ); then telnetd -l /bin/login.sh |