mirror of
https://github.com/kevingruesser/bootstrap-vz.git
synced 2025-08-24 15:36:27 +00:00
33 lines
958 B
Python
33 lines
958 B
Python
|
from base import Task
|
||
|
|
from common import phases
|
||
|
|
import os.path
|
||
|
|
|
||
|
|
|
||
|
|
class EnableShadowConfig(Task):
|
||
|
|
description = 'Enabling shadowconfig'
|
||
|
|
phase = phases.system_modification
|
||
|
|
|
||
|
|
def run(self, info):
|
||
|
|
from common.tools import log_check_call
|
||
|
|
log_check_call(['chroot', info.root, '/sbin/shadowconfig', 'on'])
|
||
|
|
|
||
|
|
|
||
|
|
class DisableSSHPasswordAuthentication(Task):
|
||
|
|
description = 'Disabling SSH password authentication'
|
||
|
|
phase = phases.system_modification
|
||
|
|
|
||
|
|
def run(self, info):
|
||
|
|
from common.tools import sed_i
|
||
|
|
sshd_config_path = os.path.join(info.root, 'etc/ssh/sshd_config')
|
||
|
|
sed_i(sshd_config_path, '^#PasswordAuthentication yes', 'PasswordAuthentication no')
|
||
|
|
|
||
|
|
|
||
|
|
class DisableSSHDNSLookup(Task):
|
||
|
|
description = 'Disabling sshd remote host name lookup'
|
||
|
|
phase = phases.system_modification
|
||
|
|
|
||
|
|
def run(self, info):
|
||
|
|
sshd_config_path = os.path.join(info.root, 'etc/ssh/sshd_config')
|
||
|
|
with open(sshd_config_path, 'a') as sshd_config:
|
||
|
|
sshd_config.write('UseDNS no')
|