From: Raphaƫl Gertz Date: Sat, 18 Jun 2016 22:12:02 +0000 (+0200) Subject: Add debug-sshd X-Git-Tag: 2.4.38-6~25 X-Git-Url: https://git.rapsys.eu/ihttpd/commitdiff_plain/b00783264a01cc52ca38d64a458e07e110512de5?hp=034a5b59d291e9a01cc9fd6c77aeb1019174e5c6 Add debug-sshd --- diff --git a/SOURCES/ihttpd.module-setup b/SOURCES/ihttpd.module-setup index c5ba6d2..947d0c1 100644 --- a/SOURCES/ihttpd.module-setup +++ b/SOURCES/ihttpd.module-setup @@ -91,6 +91,86 @@ install() { '/usr/bin/reboot' \ /usr/sbin/ihttpd + # Install sshd dirs + inst_dir \ + /etc/pam.d \ + /etc/profile.d \ + /etc/security \ + /etc/ssh \ + /etc/sysconfig \ + $systemdsystemunitdir/basic.target.wants \ + $systemdsystemunitdir/emergency.target.wants \ + $systemdsystemunitdir/rescue.target.wants \ + $systemdsystemunitdir/sysinit.target.wants \ + /usr/lib64/security \ + /usr/share/terminfo/x \ + /var/empty + + # Install sshd files + inst_multiple \ + /etc/bashrc \ + /etc/environment \ + /etc/gshadow \ + /etc/pam.d/sshd \ + /etc/pam.d/system-auth \ + /etc/profile.d/*.sh \ + /etc/security/limits.conf \ + /etc/security/pam_env.conf \ + /etc/shadow \ + /etc/ssh/denyusers \ + /etc/ssh/moduli \ + /etc/ssh/ssh_config \ + /etc/ssh/sshd_config \ + /etc/ssh/ssh_host_* \ + /root/.bash_profile \ + /root/.bashrc \ + /usr/bin/cat \ + /usr/bin/id \ + '/usr/bin/kill' \ + /usr/bin/ps \ + /usr/lib64/security/pam_cracklib.so \ + /usr/lib64/security/pam_deny.so \ + /usr/lib64/security/pam_env.so \ + /usr/lib64/security/pam_keyinit.so \ + /usr/lib64/security/pam_limits.so \ + /usr/lib64/security/pam_listfile.so \ + /usr/lib64/security/pam_nologin.so \ + /usr/lib64/security/pam_succeed_if.so \ + /usr/lib64/security/pam_systemd.so \ + /usr/lib64/security/pam_tcb.so \ + /usr/sbin/sshd \ + /usr/share/terminfo/x/* + + # Disable pam + #perl -pne 's%^UsePAM yes$%UsePAM no%;s%^PermitRootLogin .*$%PermitRootLogin yes%' -i "$initdir/etc/ssh/sshd_config" + perl -pne 's%^PermitRootLogin .*$%PermitRootLogin yes%' -i "$initdir/etc/ssh/sshd_config" + + # Sshd shell service + #XXX: KillMode=none is required to avoid sshd process getting killed in control group after parent fork + cat << EOF > $initdir$systemdsystemunitdir/debug-sshd.service +# Based on /usr/lib/systemd/system/debug-shell.service +[Unit] +Description=Early sshd shell FOR DEBUGGING ONLY +DefaultDependencies=no +AllowIsolate=no +IgnoreOnIsolate=yes + +[Service] +Type=simple +KillMode=none +ExecStart=@/usr/sbin/sshd /usr/sbin/sshd -e + +[Install] +WantedBy=sysinit.target +EOF + + # Install in sysinit.target.wants + ln -fs ../debug-sshd.service $initdir$systemdsystemunitdir/sysinit.target.wants/ + + # Install sshd user and group + `grep -Eq '^sshd:' $initdir/etc/passwd` || grep -E '^sshd:' /etc/passwd >> "$initdir/etc/passwd" + `grep -Eq '^sshd:' $initdir/etc/group` || grep -E '^sshd:' /etc/group >> "$initdir/etc/group" + # Install ihttpd.path ln -fs ../ihttpd.path $initdir$systemdsystemunitdir/sysinit.target.wants/