瀏覽代碼

Recovering backup key

Bob Mottram 10 年之前
父節點
當前提交
d71f82b17b
共有 1 個檔案被更改,包括 6 行新增3 行删除
  1. 6
    3
      install-freedombone.sh

+ 6
- 3
install-freedombone.sh 查看文件

734
   echo "  if [ -f $BACKUP_CERTIFICATE.new ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
734
   echo "  if [ -f $BACKUP_CERTIFICATE.new ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
735
   echo "    rm $BACKUP_CERTIFICATE.new" >> /usr/bin/$RESTORE_SCRIPT_NAME
735
   echo "    rm $BACKUP_CERTIFICATE.new" >> /usr/bin/$RESTORE_SCRIPT_NAME
736
   echo '  fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
736
   echo '  fi' >> /usr/bin/$RESTORE_SCRIPT_NAME
737
-  echo "  gpg $USB_MOUNT/backup/key.gpg -o $BACKUP_CERTIFICATE.new" >> /usr/bin/$RESTORE_SCRIPT_NAME
738
-  echo "  if [ -f $BACKUP_CERTIFICATE.new ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
737
+  echo "  cp $USB_MOUNT/backup/key.gpg /root/tempbackupkey.gpg" >> /usr/bin/$RESTORE_SCRIPT_NAME
738
+  echo "  gpg /root/tempbackupkey.gpg" >> /usr/bin/$RESTORE_SCRIPT_NAME
739
+  echo "  if [ -f /root/tempbackupkey ]; then" >> /usr/bin/$RESTORE_SCRIPT_NAME
739
   echo '    echo "Backup key decrypted"' >> /usr/bin/$RESTORE_SCRIPT_NAME
740
   echo '    echo "Backup key decrypted"' >> /usr/bin/$RESTORE_SCRIPT_NAME
740
-  echo "    mv $BACKUP_CERTIFICATE.new $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
741
+  echo "    cp /root/tempbackupkey $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
742
+  echo "    shred -zu /root/tempbackupkey" >> /usr/bin/$RESTORE_SCRIPT_NAME
743
+  echo "    chmod 400 $BACKUP_CERTIFICATE" >> /usr/bin/$RESTORE_SCRIPT_NAME
741
   echo '  else' >> /usr/bin/$RESTORE_SCRIPT_NAME
744
   echo '  else' >> /usr/bin/$RESTORE_SCRIPT_NAME
742
   echo '    echo "Unable to decrypt the backup key"' >> /usr/bin/$RESTORE_SCRIPT_NAME
745
   echo '    echo "Unable to decrypt the backup key"' >> /usr/bin/$RESTORE_SCRIPT_NAME
743
   echo '    exit 735' >> /usr/bin/$RESTORE_SCRIPT_NAME
746
   echo '    exit 735' >> /usr/bin/$RESTORE_SCRIPT_NAME