Ver código fonte

Change client advice, based on the control panel

Bob Mottram 8 anos atrás
pai
commit
a12bde8c89
2 arquivos alterados com 7 adições e 9 exclusões
  1. 3
    8
      doc/EN/usage.org
  2. 4
    1
      src/freedombone-client

+ 3
- 8
doc/EN/usage.org Ver arquivo

@@ -42,15 +42,10 @@
42 42
 | [[Adding or removing users]]                             |
43 43
 | [[./app_pihole.html][Blocking Ads]]                                         |
44 44
 
45
-* Readme
46
-After the system has installed a README file will be generated which contains any advice on particular apps installed. Ordinarily you won't need to read it though. You can access it with the following commands:
45
+* Securing your system
46
+There are a few things you can do to maximise the security of your system.
47
+** Use ssh keys rather than passwords
47 48
 
48
-#+BEGIN_SRC bash
49
-ssh username@domainname -p 2222
50
-editor ~/README
51
-#+END_SRC
52
-
53
-To exit if you're using emacs (which is the default editor, but can be changed to vim) you can either just close the terminal or use *CTRL-x CTRL-c* followed by the *exit* command.
54 49
 * Improving ssh security
55 50
 To improve ssh security you can generate an ssh key pair on your system and then upload the public key to the Freedombone.
56 51
 

+ 4
- 1
src/freedombone-client Ver arquivo

@@ -184,11 +184,14 @@ function configure_ssh_client {
184 184
     fi
185 185
 
186 186
     echo ''
187
-    echo $'Copy the following into a file called /home/username/.ssh/authorized_keys on the Freedombone server'
187
+    echo $'Go to the Administrator Control Panel, select "Manage Users", '
188
+    echo $'"Change user ssh public key" then "yes" and paste the following:'
188 189
     echo ''
189 190
     echo $(cat /home/$CURR_USER/.ssh/id_rsa.pub)
190 191
     echo $(cat /home/$CURR_USER/.ssh/id_ed25519.pub)
191 192
     echo ''
193
+    echo $'Then go to "Security Settings", select "Allow ssh login with passwords"'
194
+    echo $'and set it to "no".'
192 195
 }
193 196
 
194 197
 function configure_monkeysphere {