From 602fd877da0043d86467ec48637c6570e07bf97b Mon Sep 17 00:00:00 2001 From: haoshuwei Date: Mon, 25 Nov 2019 15:07:23 +0800 Subject: [PATCH] check if permit root login using ssh key on port 22 Signed-off-by: haoshuwei --- scripts/verify.sh | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/scripts/verify.sh b/scripts/verify.sh index d2084d4..42d399a 100644 --- a/scripts/verify.sh +++ b/scripts/verify.sh @@ -44,14 +44,27 @@ public::check::systemd() { public::check::systemd -# func for checking if sshd is running and listen on port 22 -public::check::sshd() { - netstat -tlpn | grep "\b22\b" |grep sshd >/dev/null 2>&1 - if [ $? -ne 0 ];then - public::common::log "Check if sshd is running and listen on port 22." "fail" +# func for checking if permit root login using ssh key on port 22 +public::check::permitrootlogin() { + if [ -d "/root/.ssh" ]; then + cp -r /root/.ssh /root/.ssh_bak + fi + mkdir -p /tmp/ack-image-builder + ssh-keygen -t rsa -P '' -f '/tmp/ack-image-builder/id_rsa' + cat /tmp/ack-image-builder/id_rsa > /root/.ssh/id_rsa + cat /tmp/ack-image-builder/id_rsa.pub > /root/.ssh/authorized_keys + chmod 600 /root/.ssh/id_rsa + ssh -o PasswordAuthentication=no -o StrictHostKeyChecking=no root@127.0.0.1 "pwd" + if [ $? -ne 0 ]; then + public::common::log "Check if permit root login using ssh key on port 22." "fail" exit 1 else - public::common::log "Check if sshd is running and listen on port 22." "pass" + rm -rf /root/.ssh + rm -rf /tmp/ack-image-builder + if [ -d "/root/.ssh_bak" ]; then + mv /root/.ssh_bak /root/.ssh + fi + public::common::log "Check if permit root login using ssh key on port 22." "pass" fi }