浏览代码

Use kernel sandbox for ssh

Bob Mottram 8 年前
父节点
当前提交
7438e6ffc3
共有 1 个文件被更改,包括 2 次插入0 次删除
  1. 2
    0
      src/freedombone-utils-ssh

+ 2
- 0
src/freedombone-utils-ssh 查看文件

88
         echo "KexAlgorithms $SSH_KEX" >> /etc/ssh/sshd_config
88
         echo "KexAlgorithms $SSH_KEX" >> /etc/ssh/sshd_config
89
     fi
89
     fi
90
     sed -i "s|#KexAlgorithms $SSH_KEX|KexAlgorithms $SSH_KEX|g" /etc/ssh/sshd_config
90
     sed -i "s|#KexAlgorithms $SSH_KEX|KexAlgorithms $SSH_KEX|g" /etc/ssh/sshd_config
91
+    sed -i 's|#UsePrivilegeSeparation .*|UsePrivilegeSeparation sandbox|g' /etc/ssh/sshd_config
92
+    sed -i 's|UsePrivilegeSeparation .*|UsePrivilegeSeparation sandbox|g' /etc/ssh/sshd_config
91
 
93
 
92
     apt-get -yq install fail2ban vim-common
94
     apt-get -yq install fail2ban vim-common
93
 
95