Browse Source

Use kernel sandbox for ssh

Bob Mottram 8 years ago
parent
commit
7438e6ffc3
1 changed files with 2 additions and 0 deletions
  1. 2
    0
      src/freedombone-utils-ssh

+ 2
- 0
src/freedombone-utils-ssh View File

88
         echo "KexAlgorithms $SSH_KEX" >> /etc/ssh/sshd_config
88
         echo "KexAlgorithms $SSH_KEX" >> /etc/ssh/sshd_config
89
     fi
89
     fi
90
     sed -i "s|#KexAlgorithms $SSH_KEX|KexAlgorithms $SSH_KEX|g" /etc/ssh/sshd_config
90
     sed -i "s|#KexAlgorithms $SSH_KEX|KexAlgorithms $SSH_KEX|g" /etc/ssh/sshd_config
91
+    sed -i 's|#UsePrivilegeSeparation .*|UsePrivilegeSeparation sandbox|g' /etc/ssh/sshd_config
92
+    sed -i 's|UsePrivilegeSeparation .*|UsePrivilegeSeparation sandbox|g' /etc/ssh/sshd_config
91
 
93
 
92
     apt-get -yq install fail2ban vim-common
94
     apt-get -yq install fail2ban vim-common
93
 
95